Security operations
Incident response, DFIR, host and network forensics, log and EDR telemetry analysis, MITRE ATT&CK mapping, detection engineering, threat hunting, SIEM (Splunk), IDS/IPS
Offensive security
Red team operations, adversary emulation, Active Directory attack paths (Kerberoasting, AS-REP roasting, DCSync, AD CS abuse, PetitPotam), web exploitation, persistence, penetration testing, CTF (forensics, crypto, pwn, RE, RF, web)
Windows & identity
Windows Server, Active Directory, Group Policy, LDAP hardening, RDS, Windows Admin Center, privileged access controls, Authentik / SAML / CAS / OAuth SSO
Infrastructure
Proxmox VE, pfSense, Linux (Ubuntu), Cisco networking, Dell servers, AWS, GCP, Azure, virtualization and datacenter operations, Apache Guacamole/noVNC, NetBird/Tailscale, infrastructure-as-code
Programming & tooling
Python, Bash, PowerShell, Java, SQL, HTML/CSS, PHP, WordPress, Wireshark, Git; LLM-driven security automation and knowledge systems
Governance & compliance
NIST 800-53, NIST CSF, NIST Privacy Framework, security auditing, data-handling under NDA and need-to-know controls
Platforms & administration
StarRez (automations, Report Generator V2, PortalX), Google Workspace administration, Microsoft 365, Toast POS