Cybersecurity Student · Security Engineering · Cloud Security · Security Analysis
Ukrainian · Building secure infrastructure at scale · Open-source security tools
Cybersecurity student at SETU Carlow focused on security engineering, cloud security, and blue teaming. I build open-source CLI/TUI security tools, solving CTF style challenges, and work on real-world AWS cloud infrastructure.
Recent highlight: Team Captain @ ZeroDays CTF 2026 · 5th/71 college teams · 18th/141 overall (Croke Park, Dublin)
Click a role below to expand tools, technologies, and key areas.
☁️ Cloud Security
Cloud Platforms
Infrastructure & Containers
Languages
Key Areas
- AWS infrastructure security (VPC, IAM, S3, Lambda, CloudTrail)
- GCP security configuration & hardening
- Container security & orchestration hardening
- Infrastructure as Code security scanning
- Cloud-native CI/CD pipeline security
🛡️ Security Engineering
Languages
Operating Systems
Databases
Networking
Key Areas
- Security tooling development (CLI & TUI)
- System hardening & configuration
- Security automation & scripting
- Secure coding practices & code review
- Network security & troubleshooting
🔍 SOC Analysis
SIEM & Monitoring
Network Analysis
Defence & Response
Scripting
Key Areas
- Log analysis & correlation
- Threat detection & incident triage
- Network traffic analysis & packet inspection
- Intrusion detection & prevention
- Vulnerability assessment & reporting
- Security event monitoring & dashboarding
🐛 Penetration Testing
Exploitation
Web Application Testing
Reconnaissance & Network
PWN & Binary Exploitation
Languages
Key Areas
- Vulnerability analysis & exploit development
- Web application security testing
- WAF/CDN fingerprinting & bypass
- Buffer overflow & ROP chain exploitation
- Binary reverse engineering
- CTF competitions & challenge solving
⚙️ DevSecOps & Automation
CI/CD & Pipeline Security
Containerisation & Orchestration
Infrastructure as Code
Web & Serverless
Key Areas
- Secure CI/CD pipeline design & hardening
- Container image scanning & runtime security
- Infrastructure as Code security linting
- Serverless architecture & deployment automation
- Automated security testing integration
- GitOps workflows & secrets management
| Project | Description | Stack |
|---|---|---|
| WAFPierce | CLI & GUI WAF/CDN fingerprinting and bypass validation tool. Detects 17+ WAFs, 12+ CDNs, runs 35+ bypass techniques with baseline heuristics | Python |
| GhostState | TUI-based AWS security & governance tool that detects ghost resources (unused/shadow IT) and risk assets in real-time | Go · AWS SDK v2 |
| GhostWeights | Hunts for unauthorised Shadow AI/ML workloads running in AWS environments | Go · AWS SDK v2 |
| Log_Analyzer | Reads security logs to detect brute-force attempts, SQLmap scans, and attack patterns — outputs statistical reports and charts | Python |
| TCP_Recon_Tool | CLI recon tool: service enumeration, TLS inspection, web stack fingerprinting, machine-readable reports | Python |
| Image-Detector-AWS | Serverless image analysis system using AWS AI services (Lambda, S3, Rekognition, DynamoDB) | AWS |