I build, break, and defend — then document how.

I’m a blue-team practitioner and cybersecurity instructor with close to four years in the field. My work spans detection engineering, threat hunting, and incident response — building home labs (a Wazuh SIEM with custom detections mapped to MITRE ATT&CK), automating alert triage in Python, and teaching those skills to students from newcomers to working professionals.

Before security, I spent five years running humanitarian programs in high-stakes, resource-constrained environments — coordinating teams, managing risk, and documenting everything under pressure. Those instincts map directly onto security operations: triage, evidence discipline, and clear incident communication. I hold the Google Cybersecurity Professional Certificate, and I learn by building — labs, detection rules, and automation — not by memorizing.