03 — Projects [L]
Everything below is real — shipped, or run in a controlled lab — and I can walk through any of it in detail. Next: what I'm certifying in.
10,000+ users · 100+ local businesses
A location-based job-matching platform for web and mobile, built with a small team and taken from an empty repository to a live product used across two cities. I worked on the authentication flows, role-based access rules, and production monitoring, and helped carry it through deployment and early growth — including keeping it stable once real people depended on it.
Stack — React Native · Supabase · Firebase · Sentry
Controlled attacks against deliberately vulnerable targets: enumeration with Nmap, exploitation with Metasploit against Metasploitable, and write-ups that turn every finding into a remediation step. This is where I learned that breaking something is only useful if you can also explain how to fix it.
Tools — Nmap · Metasploit · Metasploitable 2
A self-built SIEM environment at home: log ingestion, custom detection rules, and documented investigations. I built it to understand the defensive side as well as I understood the offensive side — watching for a problem is a different skill than finding one.
Tools — Wazuh · Linux · Windows event logs
Routers, switches, and VLANs configured in Cisco IOS with ACLs applied and traffic flow analyzed end to end. This was the class that made networking click for me — the invisible plumbing nobody thinks about until it breaks.
Tools — Cisco IOS · VLANs · ACLs · TCP/IP
Fine-tuned BERT and DistilBERT classifiers and built a small GPT from scratch, then published them publicly instead of leaving them in a notebook. Separately: SQL databases designed with role-based access control and hardened authentication, with SQL-injection and access-control flaws mapped and closed.
Stack — Python · PyTorch · SQL/MySQL · Hugging Face ↗
End of list what I'm certifying in →