Security work should make sense to the people doing it.

Structured, collaborative, and honest about the work.

I hold CompTIA Security+ and have earned the Google Cybersecurity Professional Certificate. I bring a background in computer science education and technology leadership to my developing GRC practice.

Technical background and credentials

My hands-on technical experience includes building Windows Active Directory and Linux lab environments, conducting vulnerability and threat analysis exercises, and documenting remediation steps. My technical background includes identity security, network security, incident response fundamentals, Windows and Linux, AWS and Google Cloud, Git and GitHub, and scripting with Python, PowerShell, and Bash. I am currently learning infrastructure as code with Ansible and Terraform.

Related experience includes cyber range and capture-the-flag exercises, technical documentation and presentations, lab development, and curriculum design. I also bring project management, cross-functional collaboration, stakeholder engagement, technical writing, and vendor management experience.

Selected hands-on experience

In lab environments at Log N Pacific Cyber Range, I have built and secured Windows Active Directory and Linux environments, completed vulnerability assessment and defensive security exercises, developed scripts to support lab operations, participated in red team and blue team exercises and CTF competitions, and documented attack paths, lab procedures, and remediation recommendations. This describes hands-on cyber range practice, separate from client consulting engagements.

My consulting focus is practical support for smaller and growing organizations, including organizing policies, risk information, access review records, training evidence, and readiness tasks. I’m continuing to build hands-on GRC experience and will be direct about where my scope ends or a specialist should be involved.

What you can expect

You can expect a thoughtful first conversation, a clear written scope, and work that is shaped around your team’s actual capacity. I aim to leave clients with understandable materials and next steps they can maintain, rather than compliance language that sits untouched.