Cybersecurity and data analytics professional with a background in business operations, project management, real estate development, and aviation.
I build applied projects focused on cybersecurity risk, incident investigation, security analytics, and data-driven analysis. My work combines technical analysis with operational and business context to identify risk, interpret evidence, and communicate actionable findings.
A Python-based cybersecurity GRC tool that evaluates structured security evidence against defined controls, distinguishes control exceptions from evidence-quality issues, maps findings to NIST CSF 2.0, applies risk scoring, and generates management-ready reporting.
The project implements seven controls across identity and access management, endpoint security, and third-party risk, with automated evidence validation, executive-level HTML reporting and visual analysis, and an 83-test automated test suite.
Focus: Python · pandas · pytest · GRC · Control Assurance · NIST CSF 2.0 · Risk Assessment
A simulated cybersecurity risk assessment for a construction company covering security control evaluation, risk identification and prioritization, NIST Cybersecurity Framework and CIS Controls mapping, remediation planning, and executive reporting.
Focus: GRC · Risk Assessment · NIST CSF · CIS Controls · Security Controls
A simulated Microsoft 365 business email compromise investigation covering identity and email activity, evidence analysis, incident scoping, containment and remediation, KQL-based investigation, and security framework mapping.
Focus: Incident Response · Microsoft 365 · Entra ID · Exchange Online · KQL · BEC
A Python-based security analytics tool that analyzes authentication logs to detect brute-force activity, password spraying, and suspicious successful logins through time-window analysis and event correlation.
The project produces structured security alerts for investigation and reporting and includes authentication-log validation, a command-line interface, CSV export, and a 14-test automated unit and integration test suite.
Focus: Python · pandas · Detection Engineering · Authentication Security · Log Analysis · pytest
An end-to-end analysis of 7,001,619 U.S. scheduled flights examining airline and airport performance, seasonal delay patterns, cancellations, reported delay causes, and frequently operated routes using 2025 Bureau of Transportation Statistics data.
Built a reproducible analytical workflow using R, SQL, DuckDB, Parquet, ggplot2, and Quarto, processing 12 monthly source files into a validated annual dataset and publishing analysis-ready summary tables, visualizations, and a complete analytical report.
Focus: R · SQL · DuckDB · Data Analysis · Data Visualization · Aviation
- Cybersecurity risk assessment and remediation
- Security operations and incident analysis
- Detection engineering and security analytics
- Identity and access management
- Data analysis and visualization
- Network security and traffic analysis
- Security frameworks and controls
- Operational risk and process analysis
Security: Risk assessment, security controls, incident response, authentication analysis, log analysis, detection engineering
Frameworks: NIST Cybersecurity Framework, CIS Controls
Programming & Data: Python, R, SQL, KQL, pandas, DuckDB, Parquet
Data & Reporting: Data cleaning, exploratory analysis, data visualization, ggplot2, Quarto
Systems & Tools: Git, GitHub, Linux, Windows, Microsoft 365, Entra ID
Networking: TCP/IP fundamentals, DNS, VPNs, network segmentation
Continuing to build applied cybersecurity and analytical experience with particular emphasis on security risk, defensive analysis, detection engineering, and using data to translate technical findings into practical business decisions.