cybermar8cybermar8A cybersecurity professional with hands-on experience across security operations, network security, vulnerability management, cloud security, and application security — demonstrated through personal lab environments and self-built applications, not production enterprise deployments.
A physical Cisco network — router, ASA firewall, L3/L2 switching — with SPAN-mirrored traffic feeding Security Onion (Suricata + Zeek) and Splunk Enterprise for centralized investigation.
An intentionally exposed Windows VM in Azure, capturing brute-force RDP attempts and analyzing them with Microsoft Sentinel, KQL, and GeoIP-enriched attack mapping.
A full-stack web game with hand-rolled scrypt/HMAC session auth, optional email-based 2FA, 57 serverless functions, and Stripe-gated cosmetics — live in production on Netlify.
A Flutter/Firebase mobile app with real accounts, 2FA, and a Firestore-backed content/game layer — in active development, not yet publicly released.
A Tenable-driven vulnerability management cycle on an Azure Windows VM: baseline scan, DISA/STIG compliance checks, simulated regressions, remediation, and re-validation.
Detection engineering and log-driven investigation, from traffic capture through SIEM correlation.
Featured above: Cybersecurity Home Lab, Azure Honeypot / Sentinel
A Python phishing-detection tool using TF-IDF vectorization and logistic regression (scikit-learn) to classify emails as phishing vs. safe, built and run inside a Kali Linux VM.
github.com/ZOrroryan/email-threat-detector ↗Scanning, compliance validation, remediation, and re-testing against DISA/STIG benchmarks.
Featured above: Vulnerability Management & STIG Compliance
Routing, firewalling, VLAN segmentation, and directory-services infrastructure.
Featured above: Cybersecurity Home Lab
Windows Server 2019 domain controller + client in VirtualBox, with a custom domain, DHCP/NAT routing, and bulk provisioning of 10,000 AD user accounts via PowerShell.
github.com/ZOrroryan/Home-Lab-Running-Active-Directory ↗Building the software, not just securing someone else's — auth, payments, and data layers written from scratch.
Featured above: RamoAim, IlmQuest
A progressive touch-typing curriculum — level-gated lessons, a hand-placement guide, and a live finger-coded virtual keyboard. Vanilla HTML/CSS/JS, deployed with GitHub → Netlify continuous deployment.
github.com/ZOrroryan/typingwithramo ↗A contact-only art marketplace for independent artists — no payments or checkout by design. Next.js Server Actions over Supabase Postgres, with hand-written Row-Level Security policies scoping every table to public/owner/admin access, plus Supabase Auth and image storage.
github.com/ZOrroryan/art-marketplace ↗ · Live demo ↗Endpoint administration and hardware-level troubleshooting.
Featured above: Cybersecurity Home Lab (Raspberry Pi infra nodes)
Same lab as above, from the systems-administration angle: DC provisioning, DHCP scope design, and domain-login verification testing.
github.com/ZOrroryan/Home-Lab-Running-Active-Directory ↗Diagnosed a missing TPM 2.0 chip, physically installed a TPM module, and enabled it in BIOS to meet Windows 11's security requirements ahead of Windows 10 end-of-service. Repo has no screenshots — see the linked video walkthrough.
github.com/ZOrroryan/TPM2-Installation-Windows11 ↗
A reaction-time "green light" game built with Python's Tkinter — a general GUI/event-driven programming sample, not a security project.
github.com/ZOrroryan/Python_Game ↗