I'm building a hands-on cybersecurity portfolio focused on SOC operations, secure software development, API security, container security, and DevSecOps practices.

My current focus is the intersection of cybersecurity, genomic data, detection engineering, and secure cloud-native applications.

• 🛡️ Mini-SOC with Wazuh
  A self-contained SOC lab using Wazuh in Docker, focused on log analysis, SSH brute-force detection, vulnerability detection, runtime security, dashboards, and incident response runbooks.

• 🌐 Secure Biological Data API
  A REST API for biological data with authentication, authorization, input validation, rate limiting, audit logging, security headers, and Docker hardening.

• 🧪 Cybersecurity Lab
  A hands-on security lab using intentionally vulnerable applications to document findings, CVSS scoring, exploitation evidence, and remediation guidance.

• SOC monitoring and alert investigation
• SIEM use cases with Wazuh
• MITRE ATT&CK mapping
• Incident response runbooks
• API Security and OWASP API Top 10
• Container security and runtime detection
• Secure software development and DevSecOps

• Wazuh SIEM and detection engineering
• Incident response using NIST SP 800-61
• OWASP Top 10 and OWASP API Security Top 10
• Container security and supply-chain hardening
• Threat modeling with STRIDE
• Secure CI/CD practices

Focus: SOC Analyst / Blue Team

A self-contained SOC environment designed to demonstrate:

• Wazuh single-node deployment with Docker
• SSH brute-force detection
• MITRE ATT&CK T1110 mapping
• CVE vulnerability detection
• Runtime security monitoring with Falco
• Security dashboards
• Incident response runbooks based on NIST SP 800-61

Tech: Wazuh Docker Falco Linux MITRE ATT&CK

Focus: Application Security / DevSecOps

A secure REST API for biological data designed to demonstrate:

• JWT authentication
• Role-based access control
• Input validation
• Rate limiting
• Audit logging
• HTTP security headers
• Non-root Docker container execution
• OWASP API Security Top 10 controls

Tech: FastAPI Python JWT RBAC PostgreSQL Docker

Focus: Pentesting / Security Documentation

A hands-on cybersecurity lab designed to demonstrate:

• Vulnerability analysis in controlled environments
• Evidence collection
• CVSS scoring
• OWASP mapping
• Remediation guidance
• Technical security reporting

Tech: OWASP DVWA ZAP sqlmap Linux

Each project is designed to include:

• Clear setup instructions
• Security objective and threat scenario
• Technical implementation details
• Detection logic or security controls
• Evidence, screenshots, or logs
• MITRE ATT&CK or OWASP mapping when relevant
• Remediation notes and lessons learned

I'm currently building practical experience toward roles such as:

• SOC Analyst
• Junior Detection Engineer
• Application Security Analyst
• DevSecOps Engineer
• Security-focused Backend Developer