Core Competencies
GRC
ISO 27001, NIS2, GDPR, EU AI Act. Translating regulations into technical controls.
Automation
Python, Bash, CI/CD pipelines. Automating threat intelligence and reporting.
Infrastructure
Docker, Kubernetes, Networking (TCP/IP, DNS, TLS). Hardening systems.
Security Ops
Wazuh, Suricata, ELK Stack. Monitoring, detection, and incident response.
Featured Projects
View allShortlink Platform
A deliberately simple URL shortener wrapped in a production-grade DevOps stack—Docker, Kubernetes, Helm, ArgoCD GitOps, Terraform, and full observability. The app is boring; the infrastructure is the point.
WatchPhish
A phishing intelligence and simulation platform that aggregates live threat feeds, scores and enriches indicators, maps threats geographically, and delivers interactive phishing awareness training.
Regulatory Monitoring Automation
Automated pipeline for tracking regulatory changes using RSS feeds, LLM summarization, and Slack notifications.