Projects

A security operations and IT service management platform integrating security monitoring, incident management, automation, threat intelligence, and infrastructure services into a unified environment.

Designed a segmented enterprise-style infrastructure baseline focused on network segmentation, security zones, identity management, endpoint controls, and centralized security monitoring.

My first structured infrastructure laboratory focused on building network foundations using Proxmox, pfSense, VLANs, DNS, and multi-subnet DHCP.

Built an automated incident-response workflow connecting security alerts with enrichment, network controls, notifications, and structured incident information.

Built and tested a practical SOC laboratory for endpoint monitoring, network visibility, attack simulation, event analysis, and threat hunting.

Built an authorized wireless security laboratory for analyzing 802.11 management traffic, identifying abnormal behavior, and studying wireless network security.

Implemented a secure remote-access VPN environment combining OpenVPN, PKI-based certificates, PAM authentication, MFA, and Fail2ban.

Developed a custom stateful intrusion-detection system to analyze network traffic and detect multiple attack patterns using packet inspection and state tracking.

Developed a network-security detection engine for identifying ARP spoofing by tracking IP/MAC relationships and detecting changes from an established baseline.

Built a custom network traffic analyzer for inspecting packets and understanding network traffic at the Layer 3 and Layer 4 levels.

Developed a custom TCP port-scanning tool to understand packet-level scanning and TCP connection behavior.

Built a custom firewall-management appliance that provides an application layer for managing Linux firewall rules while separating privileged operations from the main application.

Built an isolated web-security laboratory to study how a WAF detects and blocks common application-layer attacks.