Cybersecurity + security engineering

I like finding the story inside the noise.

I’m Arin, a computer science graduate who has worked in enterprise security operations and cloud security engineering. I’m most interested in detection, incident response, vulnerability management, and the tooling behind all three.

See what I’ve been building →
CURRENTLY BUILDING — OCTOBER 2026

Work in progress, not a finished snapshot.

I use this space to show what is changing between releases: new detection logic, harder test cases, clearer technical notes, and the security concepts I am actively reinforcing.

01 / SIGNALF0RGEACTIVE

From detection engine to investigation workflow.

SignalF0rge now combines 24 native detections and cross-source correlation with entity-centric cases, read-only investigation tools, bounded entity-graph pivots, an optional LLM planner, evidence-cited AI narratives, and a standalone HTML investigation dashboard.

Read the technical breakdown →
02 / NEXT BUILDIN DEVELOPMENT

Hardening the investigation agent

Evaluation now mixes 3,000 ordinary benign events with legitimate attack-like administration and 21 labeled attack scenarios. The adversarial baseline preserves 100% attack-case recall while exposing 8 known false-positive cases for future tuning.

03 / TRAININGONGOING

CompTIA Security+

Reinforcing network security, identity and access management, incident response, cryptography, and security architecture through focused study and labs.

RECENT WORK

A short build log.

Open source

Shipped merged contributions across secret handling, API authentication, CI maintenance, security-audit tracking, and developer tooling, with additional vulnerability-scanning and AI-agent security work under review.

SignalF0rge

Expanded SignalF0rge into an evidence-grounded investigation workflow, added agent safety controls and SOC-style reporting, then measured it against 3,067 mixed events: 79.49% precision, 100% recall, and 88.57% F1.

CinderProxy

Strengthened defensive parsing and verification with fuzzing, automated tests, and CI coverage.

Technical writing

Published project breakdowns covering detection correlation, reverse-proxy engineering, and AWS hardening.

AWS security lab

Worked through IAM, S3 policy, security-group, and least-privilege hardening decisions.

01 / WORK

Experience

Security operations at J&J MedTech and security engineering at CloudDefense.AI.

↗
02 / BUILD

Projects

SignalF0rge, CinderProxy, and an AWS hardening lab.

↗
03 / NOTES

Writeups

What I learned while building detection and systems projects.

↗