Hands-on projects where I build, break, and document security operations, cloud infrastructure, and tooling.

---

Security Operations Home Lab

Full security operations environment built on dedicated hardware. Covers SIEM deployment, identity and access management, data discovery, and infrastructure-as-code.

Status: Live
Stack: Wazuh, Keycloak, Presidio, Terraform, VirtualBox

---

AWS Security Posture Scanner

Custom tool that runs 21 automated security checks across S3, VPC, IAM, and EC2. Mapped to CIS benchmarks with Lambda deployment, SNS alerting, and multi-format reporting.

Status: Live
Stack: AWS Lambda, Python, CIS Benchmarks, Terraform, GitHub Actions

---

Azure Cloud Security Implementation

Secured a multi-department Azure IaaS environment with role-based access control, Key Vault encryption for data at rest and in transit, and Recovery Services backup policies with defined RPO/RTO objectives.

Status: Live
Stack: Azure RBAC, Key Vault, Azure Backup, Recovery Services, IaaS

---

Splunk Detection Engineering Lab

Building custom detection rules, correlation searches, and alerting workflows in Splunk to identify malicious activity across network and endpoint telemetry.

Status: Building
Stack: Splunk, SPL, Detection Engineering, SIEM

Vulnerability Management Lifecycle Lab

End-to-end vulnerability management workflow using Nessus for scanning, prioritization, remediation tracking, and reporting across a lab environment.

Status: Building
Stack: Nessus, Vulnerability Scanning, Remediation, Reporting

---

EDR Investigation Workflows with Wazuh

Endpoint detection and response investigations using Wazuh, covering alert triage, log correlation, threat hunting, and incident documentation.

Status: Building
Stack: Wazuh, EDR, Threat Hunting, Log Analysis