Detection and SIEM
Wazuh, Splunk, Sigma, Falcon EDR, Wireshark.
Resume
One page, application ready.
The PDF is the canonical version. This page is the fast web summary for a recruiter or hiring manager on the move.
Tagged PDF, 136 KB, updated July 2026.
Credentials
Certifications and training.
- 2026 to 2029
- CompTIA CySA+
Active May 2026 to May 2029.
- 2025 to 2028
- CompTIA Security+
Active October 2025 to October 2028.
- Cisco
-
CCNA: Switching, Routing, and Wireless Essentials
With Cisco IT Essentials.
- Butte College
-
Linux Professional Certificate
Alongside the A.S. in Cybersecurity and Information Assurance.
Project ownership
What I designed and shipped.
- 2025 to present
-
Detection-as-Code Pipeline
Custom Sigma-to-Wazuh compiler, 87 tests, GitHub Actions CI/CD, Wazuh API deployment, stable ID registry, and threat model.
- 2026
-
MCP-DETECT
MCP traffic capture, ten Wazuh rules, stateful drift detection, a measurement framework, and documented blind spots.
- 2026
-
Deceptive Identity Architecture
Authentik SSO, self-hosted Canarytokens on ARM64, Python webhook processing, and threat-intelligence enrichment in a lab.
- 2025
-
Android Malware Investigation
ADB and package-timeline analysis, APKTool, JADX, VirusTotal correlation, remediation, and a published write-up.
Technical focus
Tools in active use.
Programming and automation
Python, Bash, PowerShell, Golang, C++.
Systems and networking
Linux, Windows, TCP/IP, Cisco IOS, Docker.
Identity and emerging surfaces
Authentik, MCP telemetry, OWASP MCP Top 10, AbuseIPDB.