CompTIA Security+ certified cybersecurity professional focused on GRC and SOC operations, with hands-on experience in risk assessments, compliance frameworks, security monitoring, threat analysis, incident response, and vulnerability management. I bring strong investigative, analytical, and communication skills to protecting organizations and improving their security posture.
My Resume:
Portfolio:
GRC Mastery Capstone Project:
Enterprise Cybersecurity Program Design & Gap Assessment
Acting as cyber security consultant for a fictional organization, I assessed 98 controls against the NIST Cybersecurity Framework based on stakeholder interview notes, uncovering critical gaps including a shared admin password with no MFA, no detection or incident response capability, and an unmanaged vulnerability backlog. From these findings, I built a prioritized three-year roadmap, sequencing quick wins, process maturity, and long-term resilience and assurance; plus governance recommendations to give cyber security clear executive ownership, delivered as a formal program report to leadership.
Springboard Cybersecurity Trainee Project:
Security Monitoring: Merging Cybersecurity Infrastructures
During a Global Hotel Chain Acquisition
Developed a strategic cybersecurity integration plan for a fictional global hotel chain merger, focusing on maintaining security visibility and minimizing risk during infrastructure consolidation. The project outlined a phased approach to asset discovery, risk assessment, SIEM integration, network security, identity and access management, ERP integration, and policy standardization. Emphasizing governance, continuous monitoring, and industry best practices, the plan demonstrated how effective security operations can support a successful merger while strengthening the organization’s overall cybersecurity posture.
Springboard Cybersecurity Trainee - Capstone Project:
End-to-End Penetration Testing Engagement
Conducted a comprehensive end-to-end penetration testing engagement for a fictional enterprise, simulating a real-world external security assessment. The project followed a structured five-phase methodology, including OSINT reconnaissance, network discovery and enumeration, vulnerability assessment, threat analysis, and executive reporting. Using industry-standard tools such as Nmap, Nessus, OpenVAS, Burp Suite, Nikto, Wapiti, and Metasploit, I identified critical security weaknesses, prioritized risks using CVSS scoring, and developed actionable remediation recommendations aligned with NIST and OWASP best practices. The engagement concluded with a professional technical report and executive summary designed to communicate findings to both technical teams and business leadership.
Springboard Cybersecurity Trainee Project:
Web Application Vulnerability Remediation
Developed a comprehensive remediation plan for a fictional e-commerce web application by analyzing critical security vulnerabilities identified through the OWASP Top 10 framework. The project assessed risks including SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Sensitive Data Exposure, and Insufficient Logging & Monitoring, prioritizing each based on potential business impact. I proposed practical remediation strategies such as parameterized queries, input validation, encryption, Content Security Policy (CSP), secure authentication controls, centralized logging, SIEM monitoring, and Secure SDLC practices. This project demonstrates my ability to translate vulnerability findings into actionable security improvements that strengthen application resilience and reduce organizational risk.
Springboard Cybersecurity Trainee Project:
OWASP Top 10 Web Application Security Assessment
Conducted a security assessment of a fictional e-commerce web application using the OWASP Top 10 (2025) framework to identify and evaluate critical web application vulnerabilities. The assessment focused on analyzing risks such as Injection and Broken Access Control, evaluating their potential impact on customer data and business operations, and developing practical remediation strategies. Recommendations included implementing parameterized queries, server-side input validation, role-based access control (RBAC), secure coding practices, and continuous security testing with SAST and DAST tools. This project demonstrates my understanding of application security, secure development principles, vulnerability analysis, and industry best practices for protecting modern web applications.
Springboard Cybersecurity Trainee Project:
Zero Trust Security Strategy
Created a presentation explaining the core principles of the Zero Trust security model and how organizations can strengthen their cybersecurity posture by adopting a “Never Trust, Always Verify” approach. The project explored identity and access management (IAM), multi-factor authentication (MFA), passwordless authentication using FIDO2 and biometrics, role-based access controls, and continuous verification. It also examined how Zero Trust improves breach prevention, monitoring, audit readiness, and regulatory compliance, demonstrating a practical understanding of modern identity-centric security architectures and enterprise access management.
Springboard Cybersecurity Trainee Project:
Cloud Architecture & Deployment Strategy
Evaluated public, private, and hybrid cloud architectures to compare their security, scalability, accessibility, and cost-effectiveness for enterprise environments. The project analyzed the advantages, limitations, and ideal use cases for each deployment model while examining cloud provider responsibilities under the shared responsibility model. It also explored how organizations can balance security, regulatory compliance, and operational efficiency when selecting a cloud strategy, demonstrating a foundational understanding of cloud computing concepts aligned with NIST guidance.
Springboard Cybersecurity Trainee Project:
Network Access Control (NAC) Strategy
Researched and analyzed the role of Network Access Control (NAC) in securing enterprise networks by controlling device access based on identity, security posture, and organizational policies. The project explored core NAC capabilities, including device profiling, compliance validation, restricted network access, and centralized policy management, while examining real-world use cases such as BYOD, IoT security, guest access, and infected device containment. It also highlighted how NAC supports a defense-in-depth security strategy by reducing unauthorized access, limiting lateral movement, and strengthening overall network resilience.
Springboard Cybersecurity Trainee Project:
RFID & NFC Security Assessment
Explored the security of RFID and NFC technologies by analyzing common vulnerabilities, attack techniques, and defensive countermeasures used in modern access control systems. The project examined the capabilities of the Proxmark3 RDV4 as a security research tool, identified weaknesses in legacy RFID implementations, compared passive and active RFID tags, and evaluated strategies for mitigating risks through strong encryption, mutual authentication, secure key management, multi-factor authentication (MFA), and regular security assessments. This project demonstrates an understanding of physical access security, wireless communication technologies, and the importance of securing contactless authentication systems.
Springboard Cybersecurity Trainee Project:
Data Classification & Information Protection
Applied enterprise data classification principles to categorize information based on sensitivity, business impact, and access requirements. The project evaluated a variety of organizational data—including customer information, encryption keys, employee records, financial data, intellectual property, and public communications—and assigned appropriate classifications such as Public, Internal Use, Confidential, and Restricted. This exercise reinforced the importance of data governance, least-privilege access, regulatory compliance, and information protection strategies used to safeguard sensitive organizational assets.