I build, break and monitor systems - from a distributed IoT threat-detection mesh to intrusion detection, static analysis, forensics and CTF challenges. Every claim on this page maps to something I actually built, with the report attached.
Security graduate based in Dublin. I completed my MSc in Cybersecurity at Dublin Business School in 2025 and I am CompTIA Security+ certified. Since then I have kept building - an AI-assisted SOC detection lab on Wazuh, a distributed IoT threat-detection mesh, SNORT intrusion detection, SAST/DAST workflows, a black-box penetration test, a digital-forensics investigation and a business-continuity plan.
I care about evidence over buzzwords: everything here maps to a report or code you can open. I am looking for my first full-time role in security operations, threat detection or penetration testing, anywhere in Ireland and happy to relocate. You will find me at Dublin security events like BSides Dublin.
A home SOC on Wazuh + Sysmon. Simulated MITRE ATT&CK with Atomic Red Team, found a gap the SIEM missed (LSASS dumping) and wrote the detection that caught it. A local-LLM triage assistant maps alerts to ATT&CK, hardened against prompt injection.
A distributed cooperative IDS for IoT: sensor nodes share telemetry across a mesh while coordinators correlate events. Detection scales with coordinator density, with a lightweight Byzantine fault-tolerant consensus cutting false positives to zero at scale.
Black-box pentest of DVWA 1.0.7, chaining three vulnerabilities from initial exposure to full root: exposed phpMyAdmin → injection to a reverse shell → sudo misconfiguration for privilege escalation, with proof-of-concept steps and remediation for each.
Static and dynamic application security testing against OWASP WebGoat, separating real issues from scanner noise and mapping the top findings to a STRIDE threat model with prioritised remediation.
Two-part forensic case: recovering evidence from an E01 disk image, then reconstructing a full network intrusion from captured traffic and mapping the attack chain to MITRE ATT&CK.
Network IDS with SNORT - 8 custom rules for port scans, brute force, SQL injection and DNS abuse, run against generated traffic with alerts triaged and tuned to cut false positives.
Grey-box vulnerability assessment of a Linux DNS/DHCP server, producing 20 documented findings (5 critical) delivered as a prioritised written remediation plan.
Source-code security review of MoinMaster and Hackazon with SonarQube and Semgrep - scanning, triaging findings, separating signal from noise and documenting remediation.
An ISO 22301 business continuity and disaster-recovery plan for an acute hospital: business impact analysis with RTO/RPO targets, focused on ransomware and insider threats.
Automated AWS deployment in Terraform + Ansible + GitHub Actions, with the SSH key held in encrypted secrets, plus a documented hardening backlog reviewing my own build honestly.
A Marvel-themed six-flag capture-the-flag environment - multi-service vulnerable Linux lab, designed and built as an MSc team project (challenge design, targets and flag validation).
Hiring for SOC, threat detection or pen-testing roles anywhere in Ireland? I am available immediately and happy to relocate, with full working rights (Stamp 1G, no sponsorship needed).