03 / Toolkit
What I’ve actually worked with.
A practical inventory, grouped by how I use it—not a wall of keywords.
Security operations
Investigating alerts, validating suspicious behavior, documenting evidence, and keeping vulnerabilities visible through remediation.
SIEM alert triageCrowdStrikeRapid7Phishing analysisIncident responseThreat huntingOT security
Detection engineering
Writing rule logic, normalizing telemetry, connecting events into behavioral chains, and presenting findings with enough context to act on.
PythonSysmonMITRE ATT&CKDetection rulesCorrelation logicpytest
Cloud and application security
Security controls around cloud services, identities, application interfaces, and the places configuration quietly creates risk.
AWSIAMOAuth2REST APIsCNAPPBurp SuitePostmanDocker
Systems and development
The programming and systems foundation behind my security work.
CC++JavaLinuxBashPowerShellSQLNetworking
Training
I completed an API penetration testing course and continue to work toward CompTIA Security+.
ISC2 Certified in Cybersecurity (CC)API Penetration Testing — completedCompTIA Security+ — in progressB.S. Computer Science — UC Santa Cruz