Skip to main content
Ian Job
Defensive Engineering & Tooling

Security Projects

Security tools, detection environments and hardening guides. Each project shows its current status, from concept to published, so it is always clear what is finished and what is still being built.

Security Projects4SOC Detection Labs6
Category:
Security OperationsIn development2026-09-18

SOC Detection & Telemetry Home Lab

A dedicated virtualized SOC engineering environment with Windows 11 endpoints, Sysmon, Splunk Enterprise, and Atomic Red Team for detection rule testing.

Problem Addressed: Effective SOC detection depends on realistic operating system telemetry: generating it, forwarding it and querying it under simulated attack conditions.
Windows 11 EnterpriseSysmon v15Splunk EnterpriseSplunk Universal ForwarderUbuntu 24.04 LTS
GitHub Architecture & Details
Web SecurityPublished2026-08-30

Website Security Check

A passive security auditing utility that analyzes HTTP response headers, TLS posture, DNS security records, and exposed technology banners.

Problem Addressed: Many small businesses and developers inadvertently deploy websites lacking fundamental security headers (CSP, HSTS, X-Content-Type-Options) and email authentication records (SPF, DMARC), leaving them vulnerable to clickjacking, MIME-sniffing, and domain spoofing.
Next.js 15 (App Router)TypeScriptNode.js DNS & Fetch APIsTailwind CSS
Architecture & Details
Security EngineeringPublished2026-08-10

IOC Parser & Defanging Engine

A browser-native threat intelligence utility that parses, deduplicates, and defangs Indicators of Compromise from unformatted text and logs.

Problem Addressed: Security analysts constantly copy and paste raw incident notes, emails, and SIEM snippets containing URLs, IPs, and hashes. Manually extracting and defanging indicators for tickets and threat sharing is slow and error-prone.
React 19TypeScriptBrowser Web APIs (Clipboard, Blob)Regular Expressions (RFC Compliant)
Architecture & Details
Web SecurityWorking prototype2026-07-22

WordPress Security Hardening & Audit Checklist

A structured audit framework and configuration template designed to harden production WordPress sites against common exploitation paths.

Problem Addressed: WordPress powers over 40% of the web but is frequently compromised via automated credential stuffing against XML-RPC, REST API user enumeration, and exposed sensitive backup files.
WordPress Core & Security APIsNginx & Apache Web ServersCloudflare WAF RulesPHP Security Directives
Architecture & Details