Selected work
Security labs I’ve published, courses I’ve built, and design for real clients. Each one with what the problem was, what I did, and what came out of it.
Labs & projects
ISO 27001 Practice Lab
- StandardISO 27001:2022
- Modules7 plus a brief
- FormatBrowser lab
A lab that works through the core ISO 27001 cycle for Harbourline Cloud Services, a fictional managed cloud and SOC provider. You define the scope, score eight risks on a 5×5 matrix, choose Annex A controls, justify the Statement of Applicability, grade audit evidence, run a breach drill against the GDPR and NIS2 deadlines, and prepare a management review.
DNS Tunnelling Detection
- TechniqueT1071.004
- StackSuricata, Splunk, SOAR
- Result45 min → under 2
Rebuilt from work I did in production. Suricata flags suspicious DNS on the wire, Splunk scores it with Shannon entropy and joins it with endpoint data, and a SOAR playbook checks reputation, isolates the host and opens a ticket. The lab catches two tunnels and a slow beacon, and correctly ignores an antivirus tool that looks just like one.
SOC & Threat Intel Portfolio
- Rules3 Sigma detections
- PlaybooksPhishing IR
- CodePython IOC tool
Detection rules for encoded PowerShell, brute force logons and lateral movement over SMB admin shares, each with a Splunk version and tuning notes. Plus a phishing incident playbook, an OSINT infrastructure investigation, a Python IOC enrichment script, an OpenVAS and Nmap assessment report, and firewall, VPN and IDS labs.
PhishGuard AI
A phishing simulation dashboard with four areas: campaigns, templates, per user risk scoring, and an AI assisted template generator.
Single sign on for a federal agency
Keycloak with OAuth and OpenID Connect, connected to Active Directory, with multi factor login and access by office. I led the security side and mapped it to the NDPA. Live in eight weeks. The client stays unnamed.
Courses I've built
CompTIA CySA+
A complete instructor led CS0-003 course covering all four exam domains across 13 chapters, with 13 standalone reference documents. Every chapter was audited against the source before sign off.
Cybersecurity with AI Integration
For beginners and career switchers, three two hour sessions a week, preparing them for Security+ and CySA+. Every day has real labs, from Packet Tracer to phishing simulations and honeytokens.
Data protection training
The NDPA and GDPR, data subject rights, impact assessments and breach management, built for organisations handling personal data.
Brands & websites
Almah Africa
Website for an NGO giving women and girls access to education, digital tools and safe spaces. Designed and built in WordPress and Elementor, with donation and mission pages the team can update themselves.
Earthic Energy
A solar energy company site with a product catalogue, services and quote requests, built around a strong dark hero.
Legal Lounge
For FTLG Network: Berlin 2025, Frankfurt 2026 with its 38 page brochure, Legal Lounge Hamburg, and the Hamburg 2027 teaser.
Logos & brand systems
KidsABILITY, LOA Triplex, PHCityFashion Week, GCHIROTEX, Agojejy and more.
Posters, covers & profiles
Personal brand posters, book covers for clients, company profiles, business cards and apparel.