I work on Security Operations, building detection pipelines and investigating threats across network, endpoint, and intelligence layers. I train on CyberDefenders and BTLO to develop investigation and forensics skills, and on HackTheBox and Root-Me to stay sharp on the offensive side. Currently preparing for CompTIA Security+, with BTL1 as the next target.
| Skill | Associated Project |
|---|---|
| SIEM and Detection Rule Engineering | sigwaz-cli / sigwaz.com / wazuh-custom-dashboards |
| Security Automation and SOAR Orchestration | shuffle-soc-automation |
| Threat Intelligence Operations | shuffle-soc-automation |
| Incident Case Management | shuffle-soc-automation |
| Network Forensics and Intrusion Analysis | CyberDefenders / BTLO |
| Memory and Disk Forensics | CyberDefenders / BTLO |
| Offensive Techniques and CTF Problem Solving | HackTheBox / Root-Me |
- sigwaz-cli — A high-precision Sigma-to-Wazuh rule converter built as a robust CLI tool for automated multi-rule batch processing.
- sigwaz.com — The live web-based version of the SigWaz converter, providing a clean, minimalist React interface for instant in-browser rule translation.
- shuffle-soc-automation — End-to-end SOC pipeline: Wazuh alert ingestion, multi-source observable enrichment, automated DFIR-IRIS ticketing.
- wazuh-custom-dashboards — Custom Wazuh dashboards for SOC monitoring and detection coverage analysis.