Technical Skills

Identifying vulnerabilities in systems and applications through systematic testing and exploitation techniques.

Implementing secure network architectures, firewalls, and intrusion detection/prevention systems.

Analyzing security incidents, performing threat assessments, and implementing mitigation strategies.

Understanding and implementing encryption algorithms, secure key management, and cryptographic protocols.

Layered host and service hardening with CrowdSec, Authelia, and Infisical — reverse-proxied behind Caddy across a 22-host homelab.

Continuous scanning with Trivy (CVE-gated deploys), plus Burp Suite and nmap for application and network assessment.

Extensive experience in Python for automation, data analysis, and security tool development.

Proficient in C++ for system-level programming, algorithm implementation, and performance-critical applications.

Creating interactive web applications and implementing client-side functionality.

Type-safe React 19 frontends for StudyAIO and the Transaction Intelligence PWA, built with Vite.

Database design, query optimization, and secure data management practices.

Production REST APIs — 111 endpoints across 38 data models in StudyAIO — with Celery task queues and ~1,200 tests.

React 19 single-page apps and installable PWAs, including a D3-powered knowledge graph and analytics dashboards.

Asynchronous task pipelines and job queues (Celery, Redis/RQ) powering multi-stage document and transaction processing.

Multi-provider LLM pipelines (Claude, OpenAI, Ollama) with pgvector semantic search and RAG Q&A featuring source citations.

System administration, shell scripting, and security hardening for Linux environments.

Network configuration, troubleshooting, and security implementation including Nmap scanning techniques.

Database design, query optimization, and secure data management practices using MySQL.

Collaborative development using Git, including branching strategies and secure workflow practices.

Containerizing full-stack apps end-to-end — multi-service compose stacks for every project, deployed across the homelab.

Infrastructure-as-Code for a 22-host Proxmox cluster — 10 Ansible playbooks and 8 roles provisioning and configuring hosts.

Monitoring with Prometheus, Grafana, and Loki — 23 scrape targets, 17 alert rules, and 5 dashboards in production.

Five production n8n workflows for AI incident response, infra digests, and CVE-gated Docker update orchestration.