JF / 2026 Deep offensive experience leveraged to engineer stronger defenses, improve SIEM monitoring, and anticipate threat actor tradecraft.
OSCP+ & CRTO certified, with eJPTv2 as an earlier milestone. 200+ machines compromised on HackTheBox and Proving Grounds — web applications, Active Directory, network infrastructure, and privilege escalation — to understand precisely how attackers breach systems and how to build robust defenses against them.
Understanding custom implants, memory injection, and AMSI/EDR evasion techniques allows me to configure robust endpoint security — Wazuh rules and Defender hardening — to detect and block advanced post-exploitation behavior in Windows environments.
Weekly dynamic malware analysis via CAPE sandbox and manual behavioral inspection — dissecting persistence mechanisms, C2 patterns, and extracting IOCs to feed into threat intelligence platforms and map adversary behavior directly to MITRE ATT&CK for rapid incident response.