OVERVIEW
EXPERIENCE
IT 223 — Information Security Fundamentals
George Mason University · Fairfax, VA
Mentored 200+ students in Information Security Fundamentals — providing hands-on guidance in security labs, vulnerability assessment methodologies, phishing investigation, and cryptography fundamentals.
MSSP Practice
Comtech LLC · Reston, VA
Contributed to managed security service delivery across 5+ healthcare and government clients — designed a managed security services package (alert triage, endpoint security, network and web monitoring), built the organization's first CMMC compliance framework, applied STRIDE/DREAD threat modeling, and authored 3 technical whitepapers supporting a contract proposal.
Network Security & Infrastructure Operations
Movate Technologies / HPE-Aruba Networking · Chennai, India
Supported enterprise HPE-Aruba production environments across network security operations, escalation troubleshooting, and infrastructure hardening. Centralized switch syslog and security event monitoring in Splunk, completed 200+ vulnerability assessments with Qualys and Nessus, and hardened access controls via 802.1X, RADIUS, and TACACS+.
TECHNICAL SKILLS
SIEM & Security Monitoring
Network & Infrastructure
Cloud & IAM
Offensive Security & Assessment
Frameworks & Standards
Systems & Automation
PROJECTS
Built and validated three detections for root account usage, IAM privilege escalation, and log tampering as CloudWatch metric filters and portable Sigma rules, then reconstructed the incident from CloudTrail logs alone and documented 10 severity-ranked coverage gaps.
Packet-level threat investigation lab simulating 12 attack scenarios — reconnaissance, credential attacks, and protocol vulnerabilities — with real .pcapng evidence and MITRE ATT&CK mapping.
Comparative security assessment of real Azure and GCP virtual machine deployments — evaluating IAM, network controls, storage exposure, logging gaps, and encryption defaults.
Live Nessus vulnerability scanning, multi-protocol Wireshark analysis (ICMP, TLS, TCP, UDP, RTP), and NAT/VPN behavior investigation using real terminal output and packet captures.
Annotated SQL injection exploitation lab against a simulated web app, and RSA-2048 cryptography implementation using real OpenSSL-generated keypairs with verifiable encrypted artifacts.
Malware evolution analysis from polymorphic to APTs, with a practical component: 4 YARA detection rules targeting ransomware, polymorphic patterns, fileless PowerShell (T1059.001), and APT lateral movement (T1021).
STRIDE-based analysis of Equifax, T-Mobile, and Facebook/Cambridge Analytica breaches — evaluating IAM failures, attack vectors, and which defensive controls would have prevented each incident.
EDUCATION & CERTIFICATIONS
Academic foundation in engineering and cybersecurity.
Applied Information Technology (Cybersecurity)
George Mason University
Electronics and Communication Engineering
Jeppiaar Maamallan Engineering College (Anna University)
Professional certifications in cybersecurity and cloud security.
Splunk
Apr 2026
WRITING
Turning beginner web challenges into repeatable offensive security habits — OverTheWire Natas Level 0 to 1.
Documenting observation, page inspection, and progressive challenge solving through hands-on web app enumeration.
A practical note on looking beyond visible UI when investigating web applications for hidden attack surfaces.
Tracing a source-code comment to a disallowed robots.txt entry that quietly exposed a hidden directory — Natas Level 3 to 4.
Intercepting and spoofing an HTTP Referer header with Burp Suite to defeat a client-controlled access check — Natas Level 4 to 5.
Flipping a client-side loggedin cookie from 0 to 1 via DevTools and Burp Suite to bypass a broken authentication check — Natas Level 5 to 6.
Security storytelling around ransomware impact, operational disruption, and incident response thinking.
CONNECT
Let's build a more secure digital future together.
Location
United States
Availability
Actively Seeking Full-Time Cybersecurity Roles
Onsite · Hybrid · Remote
Roles
SOC Analyst · Network Security · Cloud Security
TryHackMe
