Hi, my name is
I'm a cybersecurity professional with hands-on experience in vulnerability management, incident response, and endpoint security. I specialize in eliminating critical risks, hardening systems against real-world threats, and translating security findings into action.
View my projectsI'm a cybersecurity professional with a deep operational background spanning vulnerability management, incident response, endpoint security, and compliance. My work focuses on eliminating critical risks at the source — through automation, configuration hardening, and disciplined remediation workflows.
At LOG(N) Pacific, I engineered PowerShell-based remediations that eliminated 100% of critical vulnerabilities across Windows and Linux environments and reduced high-severity findings by 90%. At Integrated Computer Services, I hardened Windows endpoints and automated Active Directory provisioning to enforce consistent security baselines across 10+ client environments.
I hold an M.S. in Cybersecurity (Magna Cum Laude) from Pace University's Seidenberg School and a B.A. in Computer Science & Mathematics from Purchase College. Currently, I'm focused on advancing applied security practice — particularly in STIG compliance, endpoint hardening, and detection engineering.
Designed and implemented a Group Policy solution enforcing a minimum 24-password history requirement on Windows 10 endpoints. Reduces credential reuse risk and aligns endpoint configurations with NIST 800-53 and DISA STIG guidance for password lifecycle management.
Configured advanced audit logging for User Account Management events on Windows 10. Enables detection and forensic traceability of privilege escalation, account creation, group changes, and other unauthorized account activity — a foundational control for any incident response program.
Designed and deployed a honeypot to capture and analyze attacker behavior in a controlled environment. Used the collected telemetry to practice threat intelligence gathering, IOC extraction, and incident analysis — building intuition for how adversaries probe, enumerate, and exploit exposed services.
Hands-on graduate course covering network attack vectors, forensic analysis, threat intelligence, risk assessment, IDS/IPS configuration, and secure enterprise network architecture and policy design. Lab work included attacking and defending live network environments, configuring intrusion detection/prevention systems, and enforcing security policies end-to-end.
I'm always open to conversations about cybersecurity roles, collaboration on security tooling, or interesting problems in vulnerability management and detection engineering. My inbox is open.
Say Hello