Security Operations · Network Defense
Cybersecurity graduate moving from time-critical public-safety operations into security operations — bringing incident triage, escalation, and after-action discipline to a hands-on lab practice.
Targeting SOC Analyst / Detection & Identity roles — Austin–San Antonio or remote. Available now — graduated UTSA, August 2026.
Cybersecurity graduate and CompTIA Security+, CySA+, Network+, and PenTest+ certified professional transitioning from public-safety operations to security operations. Hands-on lab work spans network segmentation, packet and alert review, cloud honeypot monitoring, and Linux/Windows infrastructure.
Brings structured incident triage, escalation, documentation, and after-action review experience from time-critical emergency response.
Security monitoring experience is lab-based, not commercial SOC employment.
Also open to systems / network administration roles.
Splunk and Wazuh local deployments; Snort alert review; Zeek, Suricata, tshark, Wireshark; SANS Internet Storm Center log review; DShield and Cowrie honeypots; Nmap.
Seven-VLAN segmentation; TP-Link Omada SDN; firewall access rules; OPNsense and UFW lab configuration; DHCP/DNS; Proxmox VE; AWS EC2 and security groups.
RHEL, Ubuntu, Windows 10/11; Bash; Ansible lab playbooks; NIST and SANS incident-response guidance; MITRE ATT&CK; technical reporting.
Modbus/TCP, DNP3, OPC UA, BACnet; PLC/RTU register reads; IT/OT segmentation and zone-and-conduit concepts.
Status: infrastructure, SIEM, and lab isolation are built and tested; first attack-to-case write-ups in progress.
Status: network layer in progress; identity and governance labs planned next.
National active-attack integrated-response training program serving multidisciplinary public-safety audiences.
Fire/rescue agency providing time-critical emergency response, multi-station readiness, and mutual-aid operations.
Combination fire/rescue organization supporting response, training, personnel readiness, and mutual aid.