Résumé

• Designed and deployed a comprehensive security testing infrastructure using VirtualBox with Ubuntu Server, pfSense firewall, Snort IDS, Kali Linux, and Metasploitable targets.
• Conducted virtual network security assessments identifying vulnerabilities across OWASP Top 10 categories (SQL injection, XSS, privilege escalation).
• Simulated 15+ attack scenarios (MITM, DoS, web application exploitation) to develop hands-on incident response and threat mitigation skills.

• Completed advanced security labs covering network exploitation, web application vulnerabilities, privilege escalation, and Active Directory attacks.
• Earned certifications in Pre-Security and Introduction to Cybersecurity pathways, demonstrating proficiency in threat detection, log analysis, and security operations.
• Developed expertise in penetration testing methodologies, reconnaissance, enumeration, and post-exploitation following industry-standard kill chain frameworks.

• Competed in 3 CTF events, solving 45+ challenges across cryptography, reverse engineering, binary exploitation, web exploitation, and digital forensics.
• Developed critical thinking skills in identifying attack vectors, analyzing malicious code, and bypassing security controls in real-world scenarios.

• Led security implementation for a book exchange web application as part of CS373 Software Engineering course, ensuring secure authentication and authorization.
• Collaborated in a 5-person Agile team deploying Python/Flask backend with MySQL; implemented SQL injection prevention, parameterized queries, and database encryption.
• Implemented Bootstrap UI and D3.js visualizations with security controls including Content Security Policy (CSP) and CSRF protection.

• Enhanced organizational security posture through deployment of quarterly phishing simulations and mandatory security education modules aligned with the NIST Cybersecurity Framework.

• Analyzed large-scale fraud datasets in financial payment services to identify security patterns and anomalies.
• Performed threat detection and incident response following NIST incident handling procedures, investigating and documenting findings in detailed incident reports.
• Evaluated security breaches involving unauthorized access and data exfiltration, developing 8 comprehensive preventive security controls and remediation procedures.
• Delivered actionable recommendations to strengthen access controls, network segmentation, and monitoring capabilities, reducing organizational risk exposure through defense-in-depth strategies.

• Configured a secure local development environment implementing least privilege access controls, secure dependency management, and version control best practices.
• Implemented JPMorgan Chase's Perspective library to create real-time data visualization dashboards with sanitized inputs and role-based access controls.

Relevant Coursework: Network Security, Cryptography, Digital Forensics, Secure Software Engineering, Ethical Hacking, Incident Response, Security Risk Management, Cloud Security Architecture