At Upstate Medical University, I provide Tier 1 support for clinical and administrative staff, resolving hardware, software, and account-access issues. I administer Active Directory and Microsoft 365 access under least privilege and document incidents through resolution or escalation.
In my self-built Azure honeypot lab, I sent Windows RDP, Cowrie SSH, and Endlessh activity to Microsoft Sentinel and captured 1.24 million attack attempts from 75 IPs in 37 hours with zero compromises. I wrote KQL analytics rules and reconstructed an SSH intrusion chain, mapping techniques to MITRE ATT&CK.
I built a Sentinel Logic App playbook that enriches incidents with AbuseIPDB and uses the Azure REST API to block high-risk IPs in an NSG. It cut triage to about 12 seconds on average, compared with 10–15 minutes manually.
I also provisioned a portfolio site with Terraform, Azure, Cloudflare, and GitHub Actions, using OIDC federation rather than stored credentials. My projects draw on my B.A. in Information Science and ISC2 Certified in Cybersecurity credential.
