// professional history

Work Experience

5+ years across cybersecurity operations, AI security research, network engineering, IT administration, and digital consulting.

Cybersecurity Analyst

Questrade Financial Group, Toronto, ON

Jan – Aug 2022

Remediated Log4Shell (CVE-2021-44228) during active global exploitation in a high-stakes financial trading environment, covering detection, patching, and verification.
Operated the vulnerability management lifecycle with Rapid7 and Device42: asset discovery, scanning, CVSS-based prioritization, patch validation, and reporting; onboarded new security tooling.
Researched emerging CVEs and attacker TTPs; authored incident response and vulnerability runbooks.

Rapid7 Device42 Log4Shell CVSS Prioritization Incident Response

IT Administrator

University of Waterloo, Waterloo, ON

May – Aug 2021

Modernized the university's IT asset management (ITAM) platform, improving asset visibility and inventory accuracy, a foundational control for vulnerability and configuration management.
Provided endpoint support across Windows and Linux fleets; configured development environments via shell/terminal operations and performed hardware diagnostics, repairs, and upgrades.
Executed network-based OS deployments, managed backup/recovery, and led cross-platform migrations.

IT Administration Windows Linux Hardware System Migrations

Digital Transformation Consultant

Waterloo Region Small Business Centre, Kitchener, ON

Sept 2020 – Mar 2021

Guided 800+ small businesses through e-commerce adoption on SaaS/CRM platforms including HubSpot, Salesforce, Square, and Shopify.
Assisted business owners in securing $2,000 Digital Transformation grants to subsidize the costs of operating online stores and websites.

HubSpot Salesforce Shopify CRM Digital Strategy

End-User Device Analyst

Toronto Transit Commission (TTC), Toronto, ON

Sept – Dec 2019

Delivered ITSM support alongside 30 technicians for 15,000 employees across the GTA; managed the ticketing queue, triaging and dispatching incidents by category, priority, and service location.
Automated performance reporting with VBA macros, Power BI, and Excel, extracting and visualizing ITSM operational data.

IT Support Power BI Excel / VBA Ticketing Systems

// capability overview

// 01

Cybersecurity & Threat Research

Active Research

Agentic AI Security & Local Inference

Build and secure agentic AI workflows with Claude Code, Codex, Hermes, and OpenClaw across frontier APIs and self-hosted LLMs. Research covers prompt-injection defense and STRIDE threat modeling, supported by a self-built multi-GPU lab for quantized models and Apple Silicon inference.

Agentic AI Prompt Injection Defense STRIDE Threat Modeling AI Agent Security IEEE Research llama.cpp GGUF Quantization Multi-GPU Inference MLX (Apple Silicon) Speculative Decoding

Professional Operations

Security Operations

High-stakes security experience as a Cybersecurity Analyst at Questrade Financial Group: remediated Log4Shell (CVE-2021-44228) during active global exploitation, operated the full vulnerability management lifecycle with Rapid7 and Device42, asset discovery, scanning, CVSS-based prioritization, patch validation, and authored incident response and vulnerability runbooks.

Rapid7 Device42 Log4Shell Remediation CVSS Prioritization Incident Response Vulnerability Management

Governance & Compliance

Security Frameworks & Policy

Working knowledge of major security and privacy frameworks, ISO 27001, SOC 2, and the NIST Cybersecurity Framework, alongside GDPR and PIPEDA privacy regulation, applied through security policy development for enterprise environments.

ISO 27001 SOC 2 NIST CSF GDPR / PIPEDA Security Policy

// 02

Network Engineering & Infrastructure

Infrastructure

Linux VPS & Hybrid Infrastructure

Extensive hands-on experience designing, provisioning, and managing Linux Virtual Private Server environments and hybrid infrastructures, from bare-metal setup through production deployment and ongoing administration.

Linux VPS Debian / Ubuntu Nginx Hybrid Infrastructure

Secure Tunneling

Proxy Protocols & Encrypted Transit

Specialist in configuring advanced secure proxy and tunneling architectures. Deployments include SSL-secured 3X-UI panels on Linux VPS and production use of VLESS, Hysteria 2, and REALITY protocols, engineered for encrypted data transit and resilient routing under adverse network conditions.

Hysteria 2 VLESS REALITY 3X-UI SSL/TLS QUIC

Mesh VPN

Self-Hosted Mesh VPN Infrastructure

Deployed and operate a Headscale control server with a self-hosted DERP relay, building a WireGuard-based mesh VPN across distributed devices, engineered for reliable connectivity in restrictive network environments using advanced tunneling protocols.

WireGuard Headscale / Tailscale Self-Hosted DERP Relay Mesh Networking

// 03

IT Administration & Technical Support

Systems Management

Enterprise IT Operations

Solid IT administration foundation from roles at the University of Waterloo and the Toronto Transit Commission, covering terminal operations, hardware deployments, network upgrades, and system migrations across Windows and Linux environments at institutional scale.

Windows Environments Linux Environments Hardware Deployment System Migrations Network Upgrades

Data Analysis

VBA, Excel & Power BI

Proficient in leveraging VBA Macros in Microsoft Excel and Power BI to parse IT management system data and generate structured performance reports, translating raw operational data into actionable insights.

VBA Macros Microsoft Excel Power BI Data Reporting

Digital Transformation

SMB Consulting & CRM Integration

Acted as a digital transformation consultant helping hundreds of small businesses integrate CRM platforms and establish online infrastructure, deployments spanning HubSpot, Salesforce, and Shopify across diverse industry verticals.

HubSpot Salesforce Shopify CRM Integration SMB Consulting

Interested in working together?

Reach out via email or LinkedIn, always happy to connect.

Contact Me