Cybersecurity professional focused on SOC engineering, cloud security, and threat detection, with a development background (Python, APIs, automation) that I apply to building and securing defensive systems.
End-to-end SIEM environment built in Azure, focused on real-world security telemetry and detection engineering.
- Azure Arc-enabled Linux (Ubuntu) machine onboarded
- Azure Monitor Agent (AMA) configured for log collection
- Syslog ingestion pipeline into Microsoft Sentinel
- KQL-based threat hunting and log analysis
- MITRE ATT&CK mapping for adversary behavior analysis
Security & SOC
Microsoft Sentinel Azure Arc Azure Monitor Agent Syslog MITRE ATT&CK KQL
Development & Scripting
Python API Development
Infrastructure & Databases
Azure Docker MySQL PostgreSQL
- SOC engineering and detection rule development (KQL)
- Cloud security architecture (Azure security services)
- Threat hunting and incident investigation
- Secure backend and API design principles
- BSc Information Science — UNISA (in progress)
"I focus on building systems I can also monitor, defend, and analyze."