I investigate complex security activity, connect evidence across tools and teams, and turn findings into practical response decisions. My independent projects extend that enterprise SecOps foundation into AI security and agentic systems.
That combination brings cross-domain context to security investigations and engineering work, with a practical understanding of how technical decisions affect teams, services, and customers.
Enterprise security experience, complemented by independent projects applying those practices to AI security and automation.
Enterprise alert triage and multi-source investigations using evidence from SIEM, EDR, network and cloud controls, vulnerability findings, and threat-intelligence sources to support escalation, threat hunting, and incident response.
InsightVM deployment and administration, recurring and ad hoc scan design, findings prioritization and reporting, remediation coordination, and follow-up validation.
TIP administration, indicator research and contextual analysis, open-source and vendor threat monitoring, and application of threat intelligence to SOC investigations and threat-hunting support.
Internal product-security assessments and penetration testing, coordination of external penetration-testing engagements, and PCI DSS and SOC 2 audit support through documented procedures and control evidence.
Independent lab and project work applying security controls to agentic workflows, Model Context Protocol integrations, local-model gateways, prompt guardrails, bounded agent authority, and adversarial control validation.
Leadership in 24/7 network operations spanning customer-impact assessment, incident escalation, service restoration, continuity of operations, mentoring, technical training, and cross-team coordination.
Hughes Network Systems · Network Security Engineer III · 2015–2026
Correlated data from SIEM, EDR, network, and cloud-security tools with vulnerability findings and threat intelligence to determine the scope and potential impact of security activity, assess risk, and support escalation and incident-response decisions.
Initiated alert-review meetings and provided tuning feedback that reduced false positives and made security alerts more actionable.
Administered Recorded Future and Rapid7 IntSights and used both platforms to research and contextualize indicators, monitor threat reporting, and support SOC investigations and threat hunting.
Deployed and supported InsightVM, designed scans, prioritized findings, tracked remediation, and performed follow-up assessments.
Designed and configured two task-specific Microsoft Copilot agents to assist with Cortex XDR alert analysis and threat-intelligence research during indicator investigations.
Earlier work in 24/7 network operations encompassed technical troubleshooting, incident escalation, service restoration, team leadership, and technical mentoring. That experience continues to inform my security operations work.
The work applies established security practices across AI systems, agentic workflows, and operational threat intelligence through AI-assisted development and documented hands-on validation.
An independently deployed and validated gateway for local AI services that centralizes model access, applies sensitive-data controls, and enforces operational guardrails.
An independently deployed and secured OpenClaw environment that constrains filesystem, network, GitHub, and case-evidence access through MCP, validates authority boundaries, and applies the bounded agent to investigation and detection-engineering work.
A threat-intelligence site organized around a rolling seven-day review window, bringing together multi-source reporting, vulnerabilities, infrastructure, and framework mappings for structured SOC review. Developed and maintained through a ChatGPT-supported workflow, with human review and approval before each update goes live.
Credentials and education supporting work across security operations, threat intelligence, penetration testing, and applied AI security.
I’m interested in senior technical cybersecurity roles across security operations, security engineering, threat intelligence, and applied AI security.