Conducted a controls and compliance assessment and provided recommendations to company stakeholders to mitigate risks and avoid fines based on best practices for NIST CSF, PCI DSS, GDPR, SOC 1 & SOC 2.
Identified DDoS attack, scope of incident, potential network vulnerabilities and protection measures, and properly documented analysis and recovery plans in order to restore normal operations and maintain alignment with NIST CSF best practices.
SQL Query
Implemented various JOIN commands (inner, left, right, self, and cross) in MySQL, utilizing UNION and UNION ALL to efficiently combine and query data from multiple tables.
Created a comprehensive vulnerability assessment for an open public database server, analyzing risk factors and proposing security enhancements in line with NIST SP 800-30 to mitigate potential threats and safeguard business operations.
Provided clear and concise written documentation of cybersecurity events, including detailed event descriptions, tools used, and lessons learned throughout the process.
A credential harvesting simulation app built with Flask, designed to educate users on phishing threats. It captures email/password input, logs user IPs, and redirects them post-login. Ideal for security awareness training and demonstrating social engineering risks.
Built a web application for uploading and downloading encrypted files. Files are encrypted on upload using AES encryption and can only be decrypted with a user-provided key. This project showcases file integrity and confidentiality best practices.
Simulated a Security Operations Center workflow by analyzing log data in Splunk and Wireshark. Detected anomalous traffic, documented incident response steps, and drafted reports using real-world log analysis practices.
This mock IT support environment involved managing Active Directory accounts, performing password resets, and documenting responses in ServiceNow. Also included Jira-based ticket tracking and process communication simulations.
Tech Used: Active Directory, ServiceNow, Jira
Focus: IT support workflows, identity and access tasks
