Security & IT portfolio

Follow the evidence. Understand the system.

I investigate endpoint, network, memory, and event evidence to reconstruct what happened and assess scope. My IT labs cover Windows/Linux infrastructure, networking, identity, and telemetry. This is hands-on lab, course, competition, and independent case-study evidence.

Based in Kelowna, BC; seeking local roles and remote work available from British Columbia.

Explore investigations & labs Credentials & education

Investigations & infrastructure

Packet analysis, simulated incident response, and an isolated SOC lab. Each case identifies the evidence, my contribution, method, and result.

Network Forensics · Independent Investigation

SOC Investigation: HTTP Cookie Data Exfiltration

Reconstructed covert HTTP-cookie exfiltration from packet evidence, preserving packet order and reversing XOR/Base64 encoding with Wireshark, TShark, and AI-assisted Python.

My role Packet analysis, investigation direction, evidence validation, and documented findings; Python implementation used AI assistance.

EvidencePCAP · HTTP cookies

MethodWireshark · TShark · AI-assisted Python

OutcomeReconstructed exfiltrated data

Read case study

SOC Engineering

SOC Lab: Wazuh, Sysmon & Zeek Telemetry Integration

Built a segmented SOC lab with Active Directory, Wazuh, Sysmon, and Zeek, then validated endpoint and network telemetry ingestion and adversary-simulation visibility.

My role Lab design, infrastructure troubleshooting, and telemetry validation in an isolated environment.

EvidenceSysmon · Zeek · Windows events

MethodWazuh · Active Directory · VMware

OutcomeValidated endpoint + network telemetry

Read case study

Incident Response · Course Simulation

SEC-504: Digital Forensics & Incident Response

Investigated simulated ransomware across endpoint, network, memory, and Windows event evidence, expanding scope from one endpoint to four.

My role Evidence correlation, attack-chain reconstruction, scope assessment, and documented response recommendations in a training environment.

EvidenceMemory · PCAP · Windows events

MethodVolatility 3 · Hayabusa · Zeek · Wireshark

OutcomeExpanded simulated incident scope to four endpoints

Read case study

GIAC certifications.

Earned credentials, with scores and status verifiable directly through GIAC.

Verify with GIAC

GCIHCertified Incident HandlerCertified · 92%

GSECSecurity EssentialsCertified · 98%

GFACTFoundational Cybersecurity TechnologiesCertified · 87%

Security analysis & technical operations

Capabilities supported by the linked labs and investigations. Guided platform training and AI assistance remain explicit in the relevant write-ups.

Investigation & response

Alert triage, evidence correlation, scope assessment, attack-chain reconstruction, IOC enrichment, MITRE ATT&CK mapping, and documented response recommendations in labs and simulations.

Network & endpoint evidence

Wireshark, TShark, Zeek, RITA, Windows event logs, Volatility 3, Hayabusa, and Sigma in case studies and training. Python-supported evidence extraction uses AI assistance.

IT infrastructure & troubleshooting

Windows Server, Windows 11, Ubuntu/Linux, Active Directory/DNS, VMware, segmented networks, static addressing, LVM, dependency conflicts, and telemetry integration in an isolated lab.

Monitoring & validation

Wazuh SIEM/XDR, Sysmon, and Zeek ingestion, with adversary-simulation telemetry reviewed against expected behavior. Microsoft Sentinel/Defender and Splunk experience is guided lab exposure.

Browse security write-ups

Browse technical operations evidence

National Cyber League: 94th percentile individual · 99th percentile team

Technical depth. Clear boundaries.

These investigations and labs demonstrate technical reasoning, troubleshooting, and evidence-based reporting. My background also includes a Management (Honours) degree and paid business/client experience. Independent AI-assisted systems work is presented in the other portfolio, with my direction and validation distinguished from agent implementation.

Full background and skills

Systems & Automation

Explore workflow design, AI enablement, data-quality validation, and business process improvement.

Explore the other portfolio