It started with physical locks: how they work, and how they fail. That curiosity moved into the digital world.
I dual-booted my first computer at 10, built my own home network lab, and worked in web development before
finding cybersecurity as a formal discipline.
Today I work across both sides of the fence: hunting threats and responding to incidents
on defence, and blackbox penetration testing and attack-surface recon on offence. Where the tooling I need doesn't exist, I build it.
My day-to-day is security operations: SIEM and SOAR across hybrid and cloud infrastructure.
I use Splunk, Microsoft Sentinel, QRadar and Nessus to detect, investigate, contain and remediate threats, working to ISO 27001,
NIST CSF and the ASD Essential Eight.
I know Microsoft Defender, identity management and Active Directory well, and I troubleshoot Windows Server,
virtualization platforms and endpoint security. I restore critical infrastructure, lead threat hunts, and align security
architecture, controls and policy with recognised standards and with what the business needs.
$ cat skills.txt
Incident Response
Threat Hunting
Remediation
Digital Forensics
Splunk · SPL
Sentinel · KQL
Microsoft Defender
Active Directory
Phishing Analysis
Threat Intelligence
OSINT
Attack Surface Mgmt
Penetration Testing
Bug Bounty
Android Security
Frida · jadx
Burp Suite
Reverse Engineering
Web App Security
TLS / PKI
MITRE ATT&CK
STIX / MISP
Risk Assessment
Security Awareness
Windows Server
Virtualization
SOAR Playbooks
IAM · MFA · SSO
ISO 27001
NIST CSF
Essential Eight
CIS Controls
Python
TypeScript
PowerShell
Go
Machine Learning