Healthcare Contingency Staffing & Compliance | Project Lead ⚙️

• The Challenge: Rapidly deployed 70+ pharmacists during a high-stakes labor dispute while managing sensitive personnel data.

• The Technical Solution: Utilized Agile methodologies for recruitment lifecycles and enforced strict regulatory compliance workflows.

• The Impact: Successfully maintained 100% operational continuity and zero gaps in patient care.

• Key Skills: Agile Project Management, Data Integrity, Risk Mitigation.

Vulnerability Assessment: E-Commerce Security Audit 🛡️

• The Challenge: Conducting a risk analysis for an e-commerce database server to identify flaws in access controls that could jeopardize customer information.

• The Technical Solution: Utilized the NIST SP 800-30 Rev. 1 framework to systematically assess the server's security posture and document the likelihood of data breaches.

• The Impact: Provided actionable strategies for remediation, enabling the organization to implement targeted enhancements and safeguard sensitive data.

• Key Skills: NIST Risk Management Security Architecture Access Control Analysis

Equifax Data Breach: Investigative Case Study 🛡️

• The Challenge: Analyzing a massive data exposure to understand root technical causes.

• The Technical Solution: Investigated failures in security architecture and unpatched vulnerabilities.

• The Impact: Identified $700M+ in financial penalties and established a roadmap for remediation through robust patch management and regular security audits. 

• Key Skills: Incident Analysis, Security Architecture, Threat Landscapes.

SQL Database Security & Vulnerability Lab 🛡️

• The Challenge: Protecting enterprise database environments from unauthorized access and common cyber threats like malicious injection attacks.

• The Technical Solution: Performed rigorous security testing and vulnerability assessments to identify, document, and mitigate SQL injection risks.

• Key Skills: SQL Security, Database Management, Technical Vulnerability Testing.

Botium Toys: Internal Security Audit 🛡️

• The Challenge: Assessing an organization's internal infrastructure to identify security gaps and compliance risks.

• The Technical Solution: Conducted a full audit to evaluate access controls and technical vulnerabilities.

• The Impact: Recommended critical security controls to mitigate unauthorized data access and provided a roadmap for full regulatory compliance. 

• Key Skills: NIST Framework, Vulnerability Assessment, Compliance Auditing.

Incident Report: DDoS Attack & Response Analysis 🛡️

• The Challenge: Responding to a major distributed denial-of-service (DDoS) attack that disrupted a multimedia company's internal network for two hours.

• The Technical Solution: Documented the incident timeline and response actions, including the implementation of new firewall rules and proactive network monitoring tools.

• The Impact: Strengthened the company’s defense posture and refined incident response protocols to improve detection and mitigate future service disruptions.

• Key Skills: Incident Response Network Defense Firewall Configuration

Automated Security Access Control (Python Algorithm) ⚙️

The Challenge

• Manual Overhead: Managing restricted content access via a manual "allow list" of IP addresses is inefficient and prone to human error.

• Security Gaps: Delaying the removal of unauthorized IP addresses creates a window of vulnerability for restricted organization data.

The Technical Solution

• Algorithm Development: Created a Python-based algorithm to automate the parsing and updating of the allow_list.txt file.

• Data Processing: Utilized Python’s .read(), .split(), and .join() methods to convert file data between string and list formats for precise manipulation.

• Iterative Logic: Implemented for loops and conditional statements to cross-reference access lists and remove unauthorized users programmatically.

The Impact

• Automation Efficiency: Replaced manual file editing with a repeatable script, ensuring that revoked IP addresses are removed instantly and accurately.

• Access Integrity: Maintained the integrity of the organization’s restricted content by ensuring only approved IP addresses retain active access.

• Technical Scalability: Developed a foundation for more advanced security automation workflows within the organization’s IT infrastructure.

Key Skills: Python Programming File Automation Data Parsing Access Control