Profile
I am a cybersecurity consultant specializing in AI security and governance, risk and compliance. Alongside that specialization I work across security operations, web and infrastructure security, threat intelligence, email security and vulnerability management, building practical security tools, documenting hands-on detection labs, and researching how AI systems and everyday web technology can be made safer.
Hands-on work with DNS, TLS, web servers, analytics data and automated workflows brings a practical understanding of how real systems behave and where they break. That understanding is applied to security operations, AI risk evaluation and GRC.
Areas of Focus
Security operationsLog analysis, alert triage, detection logic and incident documentation, practiced in isolated lab environments and written up in full.
AI securityHow LLM applications and AI agents fail under adversarial input: prompt injection, sensitive data exposure, and unsafe tool permissions, and which design choices reduce that risk.
Governance, risk & complianceTranslating frameworks such as NIST CSF, the NIST AI Risk Management Framework, ISO/IEC 27001 and ISO/IEC 42001 into controls, risk registers and checklists that small teams can use.
Security analyticsTurning raw events into evidence with Python, SQL and reproducible notebooks, and measuring how well a detection actually performs.
Working Principles
1. Evidence over assertionCapability is shown through working tools, documented labs and reproducible research, not claims. Every write-up includes its method, sources and limitations.
2. Clear labelingOriginal research, technical experiments, educational guides and commentary are labeled as such, so readers always know what kind of evidence stands behind a page.
3. Safety and authorizationTools on this site are passive and non-intrusive. Testing happens only on systems I own or am explicitly authorized to assess, using synthetic or public data.
4. Practical over theoreticalThe goal is guidance a small business or junior analyst can act on today: specific controls, configuration snippets and checklists rather than abstract advice.
Opportunities
Open to full-time, contract and consulting work across cybersecurity, led by governance, risk and compliance, including Cybersecurity Consultant (AI Security & GRC), Security Governance & Compliance Lead, GRC Analyst, Information Security Officer, Cybersecurity Analyst, SOC Analyst positions.
Works remotely. Available for consulting, contract and full-time engagements worldwide.