Cybersecurity solutions and AI-driven innovations transforming digital security landscapes.
Security Operations Center (SOC) Lab
Jun 2025
SplunkSuricatapfSenseVirtualBoxAWS
•Built enterprise-grade Security Operations Center (SOC) simulation with AWS-hosted Splunk SIEM, Suricata IDS, and pfSense firewall across Kali Linux, Ubuntu, and Windows environments
•Executed adversary emulations aligned with MITRE ATT&CK to test detection pipelines, bolster network defense, and refine IR capabilities
•Created custom Splunk dashboards with real-time correlation rules and anomaly visualizations to support threat monitoring and alerting
Automated Incident Response Platform
May 2025 – Present
PythonSplunkAWSMITRE/NIST
•Building IRBot, an automated incident response platform leveraging Suricata and Sysmon logs via Splunk on AWS EC2 for real-time threat detection and alert triage
•Researching automated response strategies and workflow optimization techniques to develop efficient threat mitigation procedures and minimize incident response times
•Designing Splunk dashboards with SPL to visualize incident timelines and response metrics; drafting NIST 800-61-aligned incident reports