Cybersecurity + AI Automation Engineer

Secure AI Automation for the Next Generation of Cybersecurity.

I design and build AI-powered security workflows that help teams triage alerts, assess risk, generate reports, and respond faster with human approval, audit logs, and secure-by-design controls.

Explore Security Demos View Projects Work With Me

Defensive SecurityAI AutomationSecure-by-DesignHuman-in-the-LoopCloud & Identity Security

Explore

Interactive preview

Let visitors touch the security workflow immediately.

The demos are safe, synthetic, defensive, and designed to prove how AI can support analysts without becoming an offensive tool.

Risk Score

Suspicious login reviewed

Decision

Review

Human approval required

Guardrail

Passed

No exploit guidance

Synthetic alert summary

New-location login, repeated MFA prompts, and mailbox rule changes combine into a high-risk account compromise scenario. The workflow recommends session review, user validation, evidence capture, and analyst approval before disruptive action.

Responsible-use boundary

No real scanning, no live targets, no malware, no credential theft, no phishing kits, and no exploit procedures. The experience redirects risky prompts toward detection, hardening, monitoring, reporting, and secure design.

Open Demo Lab

What I build

Security automation that is explainable, bounded, and useful.

The platform frames cybersecurity as product thinking: clear workflows, safe constraints, practical architecture, and measurable business value.

AI-assisted SOC workflows

Triage, enrichment, risk scoring, response recommendations, and report drafting with visible approval gates.

Secure-by-design AI interfaces

Prompt safety, data minimization, refusal paths, and structured outputs that avoid harmful cybersecurity behavior.

Audit-ready automation

Minimal metadata, guardrail status, evidence notes, and responsible ownership for every workflow decision.

Live demos

A safe cybersecurity lab visitors can explore.

Seven interactive modules demonstrate defensive AI automation, prompt safety, SOC workflow design, secure delivery, identity risk, reporting, and digital twin assessment.

5 scenarios

AI Security Copilot

Triage synthetic alerts into severity, impact, investigation steps, and human approval guidance.

Allow/Review/Block

Prompt Firewall

Classify unsafe cybersecurity intent, data leakage risk, and safer defensive rewrites.

6 agents

Agentic SOC

Watch a safe multi-agent incident workflow move through triage, risk scoring, and approval.

10 controls

DevSecOps Pipeline

Explore secure delivery stages from secret scanning through human-approved deployment.

7 nodes

Zero Trust Identity Map

Inspect synthetic identity, device, app, API, cloud, and data risk signals.

Copy-ready

Incident Report Generator

Generate safe executive and technical reports from synthetic incidents.

5 orgs

Security Digital Twin

Assess a simulated organization and turn risk into a 30-day security roadmap.

Projects

Architecture-backed case studies, not generic portfolio cards.

Each project explains the problem, system design, security controls, AI automation layer, business value, and lessons learned.

SOC Automation

AI-Powered Phishing Triage Assistant

A defensive assistant that turns reported email signals into analyst-ready triage summaries and approval steps.

Next.jsTypeScriptSupabaseZodFramer Motion

View Architecture

Read Case Study

AI Security

LLM Security Gateway

A prompt firewall concept that detects unsafe cybersecurity intent, prompt injection, and data leakage risk.

Next.jsTypeScriptZodSupabase RLSPolicy design

View Architecture

Read Case Study

Cloud Risk

Cloud Security Posture Analyzer

A synthetic cloud posture workflow that prioritizes misconfiguration risks and owner-ready remediation notes.

Cloud SecurityTypeScriptRisk scoringSupabaseDashboard UX

View Architecture

Read Case Study

DevSecOps

DevSecOps Risk Summarizer

A secure delivery visualizer that explains pipeline controls from commit through deployment approval.

DevSecOpsCI/CDTypeScriptSecurity UXSBOM

View Architecture

Read Case Study

Security automation toolkit

Reusable building blocks for serious security workflows.

The V1 system is built from modular pieces that can grow into real product workflows later.

Prompt firewall

Risk scoring

Human approval gate

Audit log panel

Incident report builder

DevSecOps visualizer

Zero Trust map

Security digital twin

Turn a simulated organization into a defensive roadmap.

Visitors can assess a SaaS startup, e-commerce team, school network, healthcare-style organization, or remote cloud team.

Sample profile

SaaS startup

Maturity score

Most likely risks are account takeover, leaked credentials, and misconfigured customer data access.

Asset map

GitHub
Vercel
Supabase
Customer support app

Risk areas

Secrets in CI
Broad admin roles
Limited incident runbooks
Sparse audit evidence

AI automation ideas

Pull request risk summaries
Access review reminders
Contact-form abuse scoring

30-day roadmap

Week 1: identity and MFA review
Week 2: CI secret controls
Week 3: logging and evidence
Week 4: tabletop exercise

Help others learn

Resources for learners building safe cybersecurity proof.

Starter ideas, prompt templates, checklists, lab guidance, report templates, and portfolio-writing support.

BeginnerPortfolio Projects

Cybersecurity project starter ideas

Defensive build ideas that are safe for portfolios and interviews.

IntermediateSOC Automation

Security automation templates

Reusable checklist structures for triage, reporting, and approvals.

BeginnerAI Security

Defensive AI prompt templates

Prompts for safe analysis, executive summaries, and report drafting.

IntermediateDevSecOps

DevSecOps checklist

A compact release checklist for secure delivery pipelines.

BeginnerSOC Automation

Incident report template

A safe, structured incident report format for learners and analysts.

Insights

Security automation notes for learners and builders.

Plain-English breakdowns of AI agents, human approval, prompt injection, DevSecOps, portfolio strategy, and Zero Trust.

AI Security6 min read

Incident Response Copilot

How AI Agents Are Changing Cybersecurity Workflows

A practical look at where agents help analysts and where human approval must stay in the loop.

Security Automation5 min read

AI-Powered Phishing Triage Assistant

Building Human-in-the-Loop Security Automation

How to design automation that helps security teams move faster without removing accountability.

AI Security4 min read

LLM Security Gateway

Why Prompt Injection Matters for Security Teams

Prompt injection is not just an AI problem; it is a trust-boundary problem with security consequences.

Portfolio5 min read

Security Experience Platform

How to Build a Cybersecurity Portfolio That Gets Attention

The difference between a generic portfolio and a proof-driven cybersecurity platform.

DevSecOps6 min read

DevSecOps Risk Summarizer

DevSecOps Pipeline Explained for Beginners

A plain-English guide to secret scanning, SAST, dependency checks, SBOMs, and release approval.

Identity Security5 min read

Zero Trust Access Review Assistant

Zero Trust Explained Through Identity Risk

A visual way to understand users, devices, apps, APIs, cloud resources, and sensitive data.

Contact

Convert serious visitors into real conversations.

Share the workflow, project, or learning outcome you want to build. The form uses validation, consent, spam protection, and server-side Supabase writes.

Best fit

AI security automation, portfolio proof, DevSecOps, cloud and identity risk

Privacy and safety

Do not send passwords, private keys, production secrets, or real incident details. Use placeholders and high-level context.

Strong requests include

Goal and audience
Current stack or skill level
Timeline and constraints