$ ls ./projects
Write-ups of real work and lab builds in cyber risk, GRC, and security engineering. Each one covers the problem, the build, how it was tested, and what I'd do next.
Networking & infrastructureSecurityP-01
A two-site enterprise network built entirely in VMware, with segmented zones, deny-by-default firewall rules, a site-to-site IPsec VPN, and centralized identity, all validated with test evidence.
SecurityGRCNetworking & infrastructureP-02
Moving a small regulated firm to a fully cloud-native stack, with identity as the security perimeter and compliance built in from day one.
A risk register with inherent and residual scoring, cross-walked to the HIPAA Security Rule and the evidence behind each control, maintained alongside a cloud migration rather than after it.
GRCP-04
Practical acceptable-use and AI usage policies for a small regulated firm, structured around the NIST AI Risk Management Framework.
Risk managementP-05
Leading a full RMIS implementation from requirements to launch, then administering the platform for more than five years.
SecurityP-06
A self-hosted Wazuh SIEM with custom detection rules, file integrity monitoring, CIS hardening, and Grafana dashboards, built to practice detection engineering.
SecurityNetworking & infrastructureP-07
How keefe.dev is built and hardened, from a static site with zero JavaScript and a strict CSP to a signed domain and authenticated email, with the scan results to prove it.