How these get built
I develop locally first with Azurite, Functions Core Tools, and SQL Server
in Docker, which costs nothing. Then I deploy to Azure for real, capture the evidence, and run
terraform destroy.
Cybersecurity Analyst at Sunflower Bank, N.A.
Cybersecurity analyst working across cloud, detection, and AI.
I'm a security analyst at Sunflower Bank, focused on AI enablement, detection, and access governance. Most of that work stays internal, so I build the same kinds of systems on my own — real infrastructure, real controls — and document how each one went.
1,500+
Users covered by the AI security controls I run
55+
Alert runbooks written across SIEM and EDR
2,500+
Endpoints I monitored in a bank SOC
35%
Drop in mean time to resolution
Domains
All work
What I work on
Six areas. Some have finished work in them, some are still empty.
Cloud Security
AWS and Azure infrastructure built with Terraform. Locking down IAM, networking, and storage, then tearing it back down.
2 projects · 2 labs
Building
AI Security
Keeping data out of models that shouldn't see it, and stopping prompt injection in apps that call them.
1 project · 2 posts
Active
Offensive Security
Attacking systems I own so the detections I write aren't guesswork.
1 project
Active
GRC & Risk
Control gap analysis and audit readiness against NIST 800-53, CSF 2.0, CMMC 2.0, and SOC 2.
1 post
Planned
Network Analysis
Reading traffic at the packet level, mostly in Wireshark.
1 lab
Active
Detection & Response
Detection rules, alert triage, and incident response playbooks.
Nothing published yet
Planned
In progress
Azure project series
Five builds. Each starts from a problem a small business actually has. I deploy them for real, save the evidence, then destroy them so the bill stays near zero.
Automated Backup System
Backups that only run when someone remembers eventually stop running. Versioning, lifecycle rules, immutability, and a daily message confirming it actually worked.
Blob Storage · Versioning · Lifecycle · Logic Apps
Cloud Security
Building
Cost Visibility Dashboard
Owners can't tell what their cloud bill will be until it shows up. This one runs on the real spend from the other four Azure builds.
Cost Management · Monitor · Logic Apps · Workbooks
Cloud Security
Building
Website Uptime Monitor
The site goes down and the owner hears about it from a customer. Three checks, alerts in seconds, and a dashboard showing the trend.
Timer Functions · Email/SMS · Workbooks
Cloud Security
Queued
Customer Inquiry Manager
Sorting and routing incoming email with a model. That means untrusted text reaching something that can take actions, so it needs real injection defenses.
App Service · Azure OpenAI · SQL · Logic Apps
AI Security
Queued
AI Inventory Tracker
Stock decisions made on gut instead of data. Live stock levels plus restock predictions.
App Service · SQL · Azure OpenAI
AI Security
Queued
Writing
All posts
Notes and write-ups
Framework breakdowns and what I learned building things.
Notes on the NIST AI RMF
What the framework actually gives you, and where it stops being useful.
AI Security
Read
Prompt Injection vs. Jailbreaking
Two AI attacks that get treated as the same thing. The difference decides where the fix goes.
AI Security
Read
Navigating CMMC 2.0
How the DoD verifies its contractors, and the three things that stuck with me.
GRC & Risk
Read
Experience
Full resume
Where I've worked
Cybersecurity Analyst
Sunflower Bank, N.A.
- Lead secure AI enablement for 1,500+ users, building DLP controls for Microsoft Copilot so non-public information stays out of it.
- Wrote 55+ alert runbooks across SIEM and EDR, which cut mean time to resolution by 35%.
- Designed a 3-tier access exception process (manager → IT risk → CISO) handling 40+ tickets a week.
Graduate Research Analyst
University of Arizona — McKeever MIS Lab
- Ran a gap analysis of 58 security controls against NIST 800-53.
- Built an ELK stack to centralize log data and automate monitoring.
Security Operations Analyst — Intern
FirstBank
- Worked alerts across 2,500+ endpoints in Splunk and CrowdStrike Falcon.
- Drafted 10+ incident response playbooks that cut investigation time by 20%.
- Helped migrate disaster recovery to AWS with automated failover.
Get in touch
I'm open to conversations
Cloud security, detection engineering, and AI security roles, or anyone building something interesting in those areas.