Portfolio / Case files
Selected policy, intelligence, and infrastructure work — from NYU graduate research and DHS consulting to enterprise security operations at CUNY.
Policy
Policy memo and briefing written for a U.S. National Security Council audience on the threat of nation-state ransomware, with response and deterrence options for senior decision-makers.
Policy
Analysis of the Colonial Pipeline incident: the risk-management failures that enabled it, the operational fallout, and the lessons critical-infrastructure operators should take from it.
Academic
Assessed Greece's national cyber capabilities, strategies, and objectives. Analyzed cyber operations and attribution of actions to actors, interpreted applicable law and policy, and made recommendations to govern future cyber activity.
Technical
Acted as Cyber Affairs Action Officer in a simulated ransomware crisis: ran the risk assessment, drafted cyber hygiene documentation, set priority actions, briefed the taskforce director, and led business-continuity strategy with logistics and CTI teams.
Academic
Intelligence report produced for the Cyber Threat Intelligence Analysis coursework — adversary profiling and tradecraft analysis for a graduate intelligence audience.
Academic
Study of the threat landscape, regulatory drivers, and security posture of the U.S. financial services sector.
Policy
Created a CSIRT universal standard with a working group managed through the International Telecommunication Union to promote CSIRT private-sector cooperation and help developing countries combat and deter cybercrime.
Technical
Case study of the OVH Cloud Strasbourg data-center fire: the events and hazards behind the disaster, the vulnerabilities it exposed, external site dependencies, the restoration process, and recommendations to strengthen business continuity and resilience.
Technical
Failure-mode and effects analysis of OT/IT vulnerabilities and threats in an organization's cyber-physical system. Applied NIST 800-53 controls and built a resilient PACE plan (Primary, Alternate, Contingency, Emergency).
Technical
Supported CUNY's Microsoft cloud adoption with technology training for staff and faculty as the university modernized its collaboration and productivity stack.
Academic
Graduate project on public-private partnership models for the NASA CubeSat program, examining how government and commercial actors share risk and capability in space systems.
Technical
Designed and built a website that helps and educates potential victims of cyberbullying with practical resources and guidance.
Academic
Threat-intelligence report on the Dridex banking trojan and the Evil Corp organization: how the malware grew out of Cidrex and Bugat, how it reached victims through spear-phishing and macro attachments, its loader, core, VNC, and backconnect components, and the ATT&CK techniques behind the campaign.
