Everything here comes from day-to-day work in a SOC, past roles in IT, GRC, and cloud engineering, and a lot of hands-on lab time. See my resume for where I’ve used each one, and my certifications for proof.
Skills
Tools, languages, and frameworks I work with.
Last updated
- Security & Monitoring
- Penetration Testing
- Threat Hunting
- Malware Analysis
- Networking
- Purple Teaming
- Threat Intelligence & Reporting
- SIEM / SOAR
- IBM QRadar
- Splunk
- Elastic Security
- Torq SOAR
- Endpoint & Network Detection
- CrowdStrike Falcon
- Microsoft Defender
- SentinelOne
- ExtraHop (NDR)
- Vulnerability Management & Awareness
- Kaseya VulScan
- BullPhish ID
- Programming
- Python
- Bash
- PowerShell
- SQL
- C
- C++
- Assembly
- PHP
- JavaScript
- Java
- R
- OCaml
- Rust
- Ruby
- HTML/CSS
- Infrastructure & DevOps
- Linux
- Git / GitHub / GitLab
- APIs
- AWS
- Azure
- Google Cloud
- AWS Services
- EC2
- S3
- Lambda
- CloudFormation
- API Gateway
- Boto3
- Frameworks & Compliance
- MITRE ATT&CK
- MITRE ATLAS
- Cyber Kill Chain
- NIST SP 800-171
- NIST CSF
- CIS Controls
- CIS Benchmarks
- CMMC
- Project & Incident Management
- Jira
- Confluence
- ServiceNow
- OSCAR investigation methodology
- Professional
- Multitasking
- Documentation
- Teaching & Mentoring
- Team Leadership
- Try Harder mindset