| Michael | Applied Cybersecurity Portfolio |
Welcome! I am an application and systems developer transitioning into cybersecurity, focusing on practical application security, workflow automation, and defensive risk management. My background bridges hands-on system architecture—including API integration and business automation—with security frameworks to identify and mitigate risks before they impact business operations.
Core Focus Areas Application Security & Threat Modeling: Identifying trust boundaries, reviewing code and architecture, and mapping data flow risks. Integration & API Security: Hardening webhooks, implementing secure credential storage, and protecting API endpoints. Governance & Risk Frameworks: Applying the NIST CSF 2.0 framework to assess posture and design practical remediation roadmaps. Security Operations & Analysis: Analyzing system telemetry, investigating alerts, and documenting incident containment.
Active Studies & Goals In Progress: CompTIA Security+, CompTIA CySA+ Long-Term Target: CISSP Hands-on Platforms: Training Labs VM, TryHackMe, Blue Team Labs Online
Portfolio Roadmap
| Project | Domain | Status |
|---|---|---|
| Project 1: Insurgent OS Security Review | AppSec, Threat Modeling & Risk Assessment | In Progress |
| Project 2: API & Webhook Security | Integration Hardening & Secret Management | Planned |
| Project 3: Small Business Security Assessment | Governance (NIST CSF 2.0) & Risk Roadmap | Planned |
| Project 4: Incident Investigation Lab Report | Threat Analysis & Incident Response | Planned |
| Project 5: Documented Cybersecurity Lab | Virtualization & Defensive Engineering | Active |
Security Guardrails & Ethics Synthetic Data Only: All logs, identities, and datasets used across these projects are synthetic; no production or proprietary client data is published. Zero Secrets: No active API keys, webhook secrets, tokens, or private credentials are included in repository histories or documentation. Authorized Scopes: All testing and analysis are strictly conducted within isolated local lab VMs or authorized learning platforms.