Rochester, MN
Security engineering, tested and bounded.
I build detection tools that show what they catch and what they miss. I also bring 17 months of hands-on IT support.
A from-scratch Sigma-to-Wazuh compiler with validation gates, stable rule identity, and API deployment behind a dry run.
58 Sigma to 216 Wazuh rules
87 automated tests
57 of 58 rules target Windows process creation
An approval-gated environment where identity, endpoint state, ticketing, alerts, approvals, and audit evidence run as one executable chain. Every privileged action passes a recorded policy decision.
2,092-case policy parity
1,631 audit records, chain valid
Synthetic environment, not a production platform
Captures MCP tool-call traffic and turns it into evidence a human reviewer can act on. Ten bounded detections, an inventory of every trust boundary crossed, and a written list of what the rules cannot see.
10 rules, 12 evasion classes
4,727-record benign corpus
3 of 12 evasion classes are structurally undetectable
Oct 2023 Feb 2025
At Butte College, I was the first point of contact for more than 300 students, faculty, and staff. I handled about 20 to 30 walk-up, phone, and email requests a day and tracked them in TeamDynamix.
I wrote more than ten guides for recurring problems. See the full IT support record for examples.
Windows 10, Windows 11, and macOS
Microsoft Office and Outlook
Wireless connectivity
Password resets and account unlocks
I’m looking for junior security operations, detection, assurance, and IT roles in Rochester or remotely.