- 🔍 Cyber security analyst focused on defensive security — detection engineering, log analysis, triage, and incident response.
- 🧰 Former IT Specialist and digital skills trainer — I bring real IT grounding and the ability to explain security to non-technical people.
- 🎯 Currently seeking a junior SOC analyst / blue team role (Melbourne & remote).
- 📚 Always building: I learn by turning concepts into working detections and tools, not just theory.
- ✅ Blue Team Level 1 (BTL1) — Security Blue Team
- ✅ CompTIA Security+
- ✅ Certificate IV in Cyber Security
- ✅ CCNA — Cisco Certified Network Associate
Security stack:
Domains: SIEM & log analysis · Detection engineering · Incident response · Threat intelligence · Windows/Linux security · Network fundamentals
| Skill | Where I demonstrate it |
|---|---|
| Detection engineering (Sigma / SPL / KQL) | Detection Engineering Lab |
| MITRE ATT&CK mapping & triage playbooks | Detection Engineering Lab |
| Python security tooling | SOC Analyst Toolkit |
| Log parsing & brute-force detection | SOC Analyst Toolkit |
| SIEM deployment & attack simulation | Home SOC Lab |
| Incident response, forensics & threat intel | Blue Team Labs |
| Phishing triage & email authentication (SPF/DKIM/DMARC) | Phishing Analyzer |
| AI / LLM security testing | AI Security Scanner |
| Project | What it demonstrates |
|---|---|
| 🧪 Blue Team Labs | 5 hands-on SOC labs — incident response & triage, phishing analysis, MISP threat intel, Splunk SIEM, digital forensics. The full detect → investigate → contain → report workflow. |
| 🎯 Detection Engineering Lab | SIEM detection rules in Sigma → Splunk SPL → Sentinel KQL, mapped to MITRE ATT&CK, each with sample logs & analyst triage playbooks. |
| 🎣 Phishing Analyzer | Python CLI that parses email headers (SPF/DKIM/DMARC), extracts IOCs, and risk-scores a .eml — CRITICAL vs LOW verdicts, with sample emails & unit tests. |
| 🐍 SOC Analyst Toolkit | Python tool: parse auth logs, detect brute force, enrich IOCs, output triage reports. Dependency-free & tested. |
| 🏠 Home SOC Lab | Documented Wazuh SIEM lab — simulate attacks, detect with ATT&CK-mapped rules, respond. |
| 🤖 AI Security Scanner | LLM red-teaming tool — automated prompt-injection vulnerability detection. |
“Defenders think in graphs, attackers think in steps — I'm learning to do both.”