Security engineer focused on vulnerability management, infrastructure security, external testing, and Python automation.
I investigate attack surfaces, build security workflows, validate technical risk, and turn findings into practical remediation.
I'm a CompTIA Security+ certified cybersecurity professional working at the intersection of vulnerability management, external security testing, and automation. My professional background includes CVE analysis, risk assessment, and translating technical findings into remediation guidance that stakeholders can act on. Alongside that, I build Python tooling to automate security reporting and cut down repetitive analyst work, and I run home-lab projects — endpoint monitoring with Wazuh, and an infrastructure security lab currently in progress — to build hands-on depth in the infrastructure and cloud-security work I'm moving toward.
A repeatable methodology for external attack-surface assessment — from reconnaissance through risk-prioritized remediation guidance.
Nmap · Nikto · Nuclei View case study →A home-lab SIEM deployment for real-time endpoint monitoring, file integrity monitoring, and alert investigation.
Wazuh · VirtualBox · Windows · Ubuntu View case study →Python tooling that parses structured security data and automates report generation to reduce repetitive analyst work.
Python View case study →A planned home-lab environment for infrastructure-as-code, network segmentation, and hardened Linux & Windows Server systems.
Proxmox · pfSense/OPNsense · Terraform · Ansible View case study →