Cybersecurity | Security Operations | eJPT

Security professional with a background in high-security operational environments in the payments industry (cryptographic operations, PKI, PCI compliance) and the crypto sector (AML/KYC fraud investigation, OSINT, pattern analysis and risk escalation), as well as customer-facing roles.

In the crypto sector, my work included enhanced due diligence, blockchain and on-chain tracing, and the detection of synthetic-identity and deepfake fraud, with high-risk cases escalated within a high-volume, AML/CFT-regulated environment.

In the payments industry, I was part of an information security operations team, focusing on cryptographic key lifecycle management and PKI services, certificate workflows, and PCI DSS compliance within a strict dual-control environment.

I completed an intensive six-month cybersecurity bootcamp covering SOC, SIEM, DFIR, MITRE ATT&CK and red-team methodology, earned the eJPT, and I'm now working towards the OSCP. I keep developing my skills through home-lab projects, currently an AI-augmented detection pipeline (Wazuh, Suricata, n8n, Claude API).

🛡️ Argus SOC | AI-augmented home-lab Security Operations Center modelled on an MSSP architecture detection engineering · Wazuh · Suricata · Zeek · Velociraptor · Active Directory · Claude API triage

📚 Offensive Security Foundations | Open, structured self-study path for offensive security: ten courses, checkpoints and CTF practice

📂 Cybersecurity Portfolio | Red-team and blue-team projects and tools (available on request)

🏆 TryHackMe: Top 3% globally | Profile

A three-tier AI-augmented SOC that mirrors real MSSP/MDR infrastructure (Argus SOC):

• Cloud SOC platform — Wazuh SIEM (Manager + Indexer + Dashboard), detection rule tuning and false-positive reduction, n8n workflows for automated alert routing, Velociraptor DFIR, Claude API alert triage
• Client enterprise (hypervisor) — Proxmox host running an Active Directory domain (Windows Server DC, domain-joined Windows workstation) with Kerberos, GPO and DNS, plus intentionally vulnerable targets (Metasploitable 2, DVWA)
• MSSP edge sensor — Suricata NIDS on a switch SPAN port, Zeek protocol analysis, Cowrie SSH honeypot, Wazuh and Velociraptor agents, Pi-hole DNS, WireGuard VPN, Grafana dashboards

📈 Value-Lens | Stock-evaluation tool applying Graham and Buffett criteria to public company filings | Python in the browser via Pyodide/WebAssembly · Cloudflare Workers

🔌 OpenVPN-Manager | Bash utility to start, stop and check OpenVPN profiles from a menu or the command line