I am a security-driven professional dedicated to defending digital infrastructure and neutralizing sophisticated threats. With a core expertise in Network Defense, Intrusion Detection, and Digital Forensics, I focus on building resilient environments and staying ahead of the evolving threat landscape. I enjoy building hands-on security labs, penetration testing environments, and defensive security projects.

• 🔐 Cybersecurity Home Lab
• 🛡️ Defensive Security Projects
• 🧪 Penetration Testing Lab
• 📊 Security Monitoring & Threat Detection
• 🧩 Job Simulations

Showcasing hands-on experience in Windows Server, Active Directory, and systems administration.

• 🏢 Windows Server 2022 Active Directory Lab

  • Summary: Built a hands-on AD home lab in VirtualBox featuring AD DS, DNS, an Enterprise Root CA, domain users, nested OUs, security groups, and custom Group Policy Objects.

Showcasing hands-on experience in defensive and offensive operations.

• 🔐 Internal Security Audit & NIST CSF Gap Analysis

  • Summary: Conducted a comprehensive internal IT security audit and 26-point gap analysis for a retail enterprise, mapping administrative, technical, and physical controls against the NIST CSF and evaluating regulatory compliance (PCI DSS, GDPR, SOC 2).

• 🚨 Incident Response Analysis Using NIST CSF

  • Summary: Investigated and mitigated a simulated DDoS ICMP flood attack for a digital media enterprise, applying the NIST CSF lifecycle to harden border firewalls, integrate SIEM monitoring, and optimize incident response times.

• 🧪 Self-Hosted Penetration Testing Lab

  • Summary: Executed an end-to-end VAPT engagement in an isolated VirtualBox environment, combining Nmap enumeration, Tenable Nessus vulnerability scanning, and Metasploit exploitation to validate system risks and engineer robust remediations.

• 🔑 Least Privilege Enforcement: Linux File Permission Audit & Remediation

  • Summary: Conducted a comprehensive Linux file permission audit within the /projects directory to enforce the Principle of Least Privilege, successfully eliminating unauthorized write exposure from 100% to 0% in strict alignment with NIST SP 800-53 standards.

• 🗄️ SQL Security Investigation Login Activity & Asset Review

  • Summary: Executed advanced SQL threat-hunting queries and relational joins on enterprise logs to isolate brute-force attacks, detect foreign session anomalies, and streamline corporate patch compliance.

• ⚠️ Vulnerability Assessment Report: Small Business E-Commerce

  • Summary: Conducted a qualitative risk assessment and quantitative threat analysis of a public-facing e-commerce database using the NIST SP 800-30 framework, formulating a multi-layered defense-in-depth remediation strategy to eliminate single points of failure.

• 📓 Incident Handler's Journal

  • Summary: Documented a series of seven comprehensive incident response investigations—covering ransomware triage, Wireshark and tcpdump network forensics, VirusTotal malware hash analysis, phishing playbooks, and Suricata IDS rule generation—aligned with NIST and HIPAA guidelines.

• 🤖 Automating IP Allow-List Management with Python

  • Summary: Developed a robust Python security automation script to parse, filter, and update network access control lists, enforcing the Principle of Least Privilege and eliminating manual administrative error in healthcare IT infrastructure.

• 🛡️ Guardian-Sentinel: A Python-Based Network Packet Sniffer for Attack Detection

  • Summary: Developed a custom Python and Scapy-based network packet sniffer and intrusion detection system featuring real-time protocol inspection, automated threat alerting, and forensic event logging to detect SYN floods, ARP spoofing, and DNS hijacking.

• Mastercard Cybersecurity: Phishing Defense & Awareness

  • Summary: Designed a targeted Black Friday phishing simulation and analyzed departmental success rates to build a data-driven security awareness strategy for high-risk human layers.

• AIG Shields Up: Cybersecurity

  • Summary: Responded to simulated zero-day Log4j vulnerabilities and ransomware execution by analyzing security alerts, deploying script-based file decryption, and authoring multi-stakeholder advisories.

• TATA Consultancy Services (TCS) Cybersecurity - IAM Developer

  • Summary: Evaluated corporate IAM readiness and designed custom identity lifecycle frameworks enforcing role-based access control, principle of least privilege, and multi-factor authentication.

• DATACOM Cyber Security Operations

  • Summary: Triaged incoming security events and investigated enterprise telemetry anomalies to maintain operational stability and rapid incident containment.

• Deloitte Cyber: Internal Threat & Forensic Analysis

  • Summary: Examined insider threat indicators and conducted forensic analysis on compromised digital artifacts to reconstruct attack vectors and formulate risk mitigation plans.