Cybersecurity & Network Engineer with backend and AI/ML expertise, focused on building secure, scalable, and intelligent systems.
"I design and secure systems across network, backend, and AI layers — from traffic-level analysis and SOC operations to building intelligent detection systems and scalable infrastructure."
Combining network engineering (L1 troubleshooting, OSPF/BGP routing layouts, and traffic forensics) with deep-seated security methodologies (IDS tuning, SIEM alert triage, and vulnerability assessments) creates a unified barrier against modern infrastructure threats.
Threat assessment, alert monitoring, and structural defense planning using real-time log engines.
Architecting secure topology layouts, path optimizations, routing protocols, and diagnostic analysis.
Developing asynchronous client-server infrastructures with cryptographic validation pipelines.
Using advanced models for traffic pattern checks, coupled with infrastructure-as-code automation.
Simulate real L1 incident response, logs analysis, and threat mitigation steps. Select an alert from the SIEM monitor list to begin triaging.
Trained to work in complex infrastructure scenarios:
My research thesis focused on high-precision detection of application-layer DDoS flood attacks. Built dynamic feature engineering pipelines on the CICIDS2017 dataset, combining ML (LightGBM, KNN) with Explainable AI models (SHAP) to interpret deep classifier decisions.
Designed a complete, scalable enterprise network topology in Cisco Packet Tracer. Configured VLAN trunking, inter-VLAN routing, and Access Control Lists (ACLs) to establish network segmentation and strict perimeter control.
Automated VM provisioning and network interface attachment on an OpenStack cloud layer using Ansible playbooks. Implemented a telemetry stack with Prometheus metrics exporters feeding into Grafana status dashboards.
Configured load balancer traffic routing profiles in Microsoft Azure to distribute high rates of TCP requests across dockerized test nodes. Optimized request limits to handle service outages.
Deployed and tuned a Snort Intrusion Detection System to monitor external interfaces on a private subnet. Built rule filters to intercept specific flood signatures, resulting in less than 5% false-positive alerts.
Simulated rate-limited flooding attacks (Ping of Death, UDP floods) against a target server. Developed custom iptables filters and firewall segments to rate-limit or drop toxic traffic patterns without disrupting user operations.
Designed a secure client-server API utilizing FastAPI. Built a role checking engine (RBAC) to control read/write execution thresholds, paired with cryptography mechanisms (AES-GCM encryption at rest, secure handshakes).
Programmed an asynchronous, multi-client TCP network socket server using Python's asyncio module. Handled simultaneous file downloads, verification checksum checks, and concurrent connection pool limits.
Analyzed and categorized prompt injection vectors (indirect prompt injection, jailbreaks) in Large Language Models. Built an assessment matrix testing defense strategies including input sanitization and prompt wrappers.
Developed a real-time multiplayer application leveraging WebSockets for instant state synchronization. Integrated an LLM-based game engine to dynamically coordinate user actions and narrate matches.