Skills
Grouped the way I use them. Each skill links to the project that shows it in practice, and skills that come from work, coursework, or a certification say where they come from.
Security operations & SIEM
Shown inAI-Powered SOC Alert TriageRestoring an Unreachable Linux ServerSelf-Hosted Multi-Server PlatformActive Directory Domain Lab
- Wazuh SIEM
- Alert triage
- Log analysis
- MITRE ATT&CK mapping
- Windows Event Logs
- Linux auth logs (PAM, SSH)
- Wazuh Indexer / OpenSearch
- Incident investigation
- Incident documentation
- Security event correlationSecurity+ and Google Cybersecurity coursework
Vulnerability management
Identity & access (Active Directory)
Shown inActive Directory Domain LabAI-Powered SOC Alert Triage
Programming & automation
Shown inAI-Powered SOC Alert TriageTHE BRAINSelf-Hosted Multi-Server Platform
AI & prompt engineering
Shown inIterative Prompt EngineeringTHE BRAINAI-Powered SOC Alert Triage
Professional skills
Shown inSelf-Hosted Multi-Server PlatformAI-Powered SOC Alert TriageRestoring an Unreachable Linux ServerActive Directory Domain LabTHE BRAINCredentialed vs. Unauthenticated ScanningIterative Prompt Engineering
- Technical documentation
- Root cause analysis
- Methodical troubleshooting
- Team leadership
- Project ownership
- Configuration management
- Help desk & ticketingIT support work at Phaze Zero Technology Services
- Hardware setup & supportIT support work at Phaze Zero Technology Services
- NIST frameworksDegree coursework and Security+
- Incident response processSecurity+ and Google Cybersecurity
Currently learning
Where my study time goes right now, each tied to a certification or to the next step on an existing project.
Linux administration depth
Red Hat RHCSA, my current focus
A hands-on exam covering users and permissions, storage, networking, services, and SELinux.
SOC analyst skills
CompTIA CySA+ and TryHackMe SAL1
Threat detection, log analysis, incident investigation, and security monitoring at an analyst level.
Cloud security depth
Microsoft AZ-500
Building on AZ-900 and my Azure lab work toward identity, platform protection, and cloud security monitoring.
Python security tooling
Next steps for the SOC triage tool
Multi-alert triage, severity filtering, duplicate tracking, and a lightweight dashboard for the Wazuh pipeline.