Skip to main content
Ian Job
Defensive Engineering & Tooling

Security Projects

Practical security tools, detection engineering environments, and hardening frameworks personally built and documented.

Category:
Security Operations2026-09-18

SOC Detection & Telemetry Home Lab

A dedicated virtualized SOC engineering environment with Windows 11 endpoints, Sysmon, Splunk Enterprise, and Atomic Red Team for detection rule testing.

Problem Addressed: Gaining practical SOC investigation skills requires hands-on experience generating, forwarding, and querying realistic operating system telemetry under simulated attack conditions.
Windows 11 EnterpriseSysmon v15Splunk EnterpriseSplunk Universal ForwarderUbuntu 24.04 LTS
GitHub Architecture & Details
Web Security2026-08-30

Website Security Health Monitor

A passive security auditing utility that analyzes HTTP response headers, TLS posture, DNS security records, and exposed technology banners.

Problem Addressed: Many small businesses and developers inadvertently deploy websites lacking fundamental security headers (CSP, HSTS, X-Content-Type-Options) and email authentication records (SPF, DMARC), leaving them vulnerable to clickjacking, MIME-sniffing, and domain spoofing.
Next.js 15 (App Router)TypeScriptNode.js DNS & Fetch APIsTailwind CSS
Architecture & Details
Security Engineering2026-08-10

IOC Parser & Defanging Engine

A browser-native threat intelligence utility that parses, deduplicates, and defangs Indicators of Compromise from unformatted text and logs.

Problem Addressed: Security analysts constantly copy and paste raw incident notes, emails, and SIEM snippets containing URLs, IPs, and hashes. Manually extracting and defanging indicators for tickets and threat sharing is slow and error-prone.
React 19TypeScriptBrowser Web APIs (Clipboard, Blob)Regular Expressions (RFC Compliant)
Architecture & Details
Web Security2026-07-22

WordPress Security Hardening & Audit Checklist

A structured audit framework and configuration template designed to harden production WordPress sites against common exploitation paths.

Problem Addressed: WordPress powers over 40% of the web but is frequently compromised via automated credential stuffing against XML-RPC, REST API user enumeration, and exposed sensitive backup files.
WordPress Core & Security APIsNginx & Apache Web ServersCloudflare WAF RulesPHP Security Directives
Architecture & Details