Portfolio Website on S3 + CloudFront + ACM
A static portfolio site delivered through CloudFront with TLS, DNS integration, and a private-origin mindset.
View full projectSelected work
Projects and build logs
A collection of technical projects across AWS, security, homelab infrastructure, and documentation. Each entry below is a summary card that links to the full project page. In addition im also active in TryHackMe with over 130 rooms completed and have progressed through the SAL 1 learning progression.
Wazuh SIEM Lab with Custom Detection Rules
A self-hosted SIEM project focused on monitoring SSH access, sudo activity, and account-management events through layered custom rules and practical log analysis.
View full projectHomelab Infrastructure Overview
A full-stack homelab project covering physical setup, VLAN-based network design, Docker services, reverse proxying, and internal DNS — focused on how all layers connect to form a cohesive, real-world system.
View full projectProduction Studio IT Infrastructure
Designed and implemented a small business IT environment for a film production studio, using Docker-based services, internal DNS, and VPN-secured access. Focused on centralizing tools, improving collaboration, and applying real-world infrastructure and security practices under budget and hardware constraints.
View full projectProduction Studio Website Redevelopment & Hosting Remediation
Rebuilt a business website while resolving underlying DNS and hosting issues, including incorrect domain routing and missing cPanel functionality. Consolidated services under a single provider, implemented SSL, and configured SPF, DKIM, and DMARC to stabilise email delivery and improve overall reliability.
View full projectWeb Application Security CTF Report
A six-stage application security challenge covering JavaScript recon, exposed APIs, authentication logic, privilege escalation, and final flag retrieval.
View full reportPublic SSH Honeypot with On-Prem Wazuh SIEM
A public-facing Cowrie SSH honeypot deployed on a VPS, forwarding attacker activity into an on-prem Wazuh SIEM with custom rules, segmentation, and investigation dashboards.
View full project