Projects

Audited authentication flows across a Next.js delivery application and identified two high-severity vulnerabilities: an unprotected admin dashboard accessible to any user with the URL, and an unauthenticated API endpoint that allowed arbitrary reassignment of drivers to customer orders. Implemented route-level authentication middleware integrated with Supabase, enforcing session validation and role-based access control across all administrative pages and API routes. Applied defense-in-depth by adding handler-level authorization checks on sensitive endpoints, ensuring access control remains intact even if upstream configuration is modified.

Built for Applied Cybersecurity Analytics and AI coursework. Applied LLM integration, Python scripting, and network log analysis to develop an AI-based IDS that processed real-world Cisco attack data through a locally-hosted Ollama 3 model. Delivered 100% detection accuracy across a live attack dataset and correctly classified intrusions by severity.

During my CMIT Solutions internship, implemented SIEM integration on Perchybana for O365, firewall, and TLS log sources. Mapped raw log data to standardized fields and built custom dashboards and detection rules surfacing risky authentication behavior and abnormal traffic patterns, in close collaboration with SOC staff.

The site you're reading. Built as a static website and deployed to Amazon S3 with a public-read bucket policy for the ITSS 4371 Cloud Computing course. Demonstrates a production-realistic pattern for hosting low-traffic sites with high durability and zero server management.

Built websites for Klein Sports Performance using HTML and JavaScript, allowing visitors to learn about the company's services and offerings.