Projects
Infrastructure, automation, and platform work shaped by real operating constraints, observability needs, and compliance-ready environments.
A Wazuh-based security monitoring and compliance operations offering focused on audit readiness, repeatable deployment, alert tuning, malware detection, and operational guardrails for ISO 27001, PCI DSS, and similar control-heavy environments.
A reusable centralized DAST project with OWASP ZAP, Nuclei, and OPA policy logic, offering consistent PASS/WARN/FAIL policies, audit-ready artifacts, PR summaries, and a reusable GitHub Actions workflow for dynamic security testing.