Currently an Extern @Hydroficient
I’m on a journey to build my career in Sales and Business Development, enhancing my skills and gaining real-world experience.
Discover my projects and experiences that showcase my growth in Sales and Business Development, highlighting my commitment to continuous learning.
.jpg)
Hydroficient · ✅ Verified by Extern · ⏱️ In progress
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
Built and deployed a Flask-based anonymous message board with admin authentication, secure logging, and moderation tools. Implemented environment-variable-based admin credentials to avoid hardcoding sensitive login information in source code. Added automatic logging for user activity, including timestamps, anonymous identifiers, request data, and submitted messages. Developed moderation tools and a basic threat scoring system to help identify potentially risky or abusive submissions. Deployed and tested the application on AWS EC2 using Linux terminal workflows and portfolio-ready documentation.
I’m on a journey to build my career in Sales and Business Development, enhancing my skills and gaining real-world experience.
I'm a junior at SUNY Institute of Technology, pursuing my Bachelor's Degree. With a focus on Sales and Business Development, I'm eager to enhance my professional skills and officially launch my career. Currently, I'm gaining hands-on experience through my externship at Hydroficient.
Externships
Hydroficient IoT Cyber Defense Externship
Hydroficient
Experience
Security Guard
Allied Universal · Columbia University | May 2023 - July 2024
QA Tester
Project-Based / Contract Work · Remote
STEM Mentor / Tutor
Rebuilding the Village Utica · Unpaid Community Service
Education
SUNY Polytechnic Institute
Bachelor of Science in Cybersecurity · Class of 2028
Skills
✅ Verified by Extern · ⏱️ In progress
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
The work analyzed a 500-room hotel water monitoring system, inventoried key assets with CIA ratings, mapped data and command flows, and applied STRIDE to prioritize threats. It built a local MQTT pipeline, generated realistic sensor logs with Python, then secured the pipeline with TLS and mTLS while running controlled experiments. Deliverables included a threat model, a Python sensor log
I produced a professional threat model for a 500-room hotel's water monitoring system, a Python sensor log generator, an insecure and then TLS/mTLS-secured MQTT pipeline with experiment results, replay-attack defenses validated across 12 tests, and a formal device provisioning policy.
The project analyzed a 500-room hotel water monitoring system, inventoried key assets, mapped data and command flows, and applied STRIDE to identify and prioritize top threats. The deliverable included an executive summary, asset CIA ratings, and mitigation-focused findings.
The module asked to build a sensor log generator from simulated water sensor data. I wrote Python code in Google Colab to generate timestamped sensor readings with realistic variation and output a structured log suitable for analysis.
The externship built a local MQTT pipeline, ran a Python sensor publisher and dashboard subscriber against Mosquitto, intercepted messages with mosquitto_sub, and recorded plaintext JSON containing device IDs, timestamps, counters, and pressure/flow readings.
The project secured an MQTT pipeline with TLS, ran four experiments (eavesdrop, certificate validation, latency, stress), and produced a written security assessment that reported TLS blocked eavesdropping, rejected wrong certs, showed no measurable latency change, and confirmed successful…
The project reviewed one-way TLS gaps, implemented mTLS on the Mosquitto broker and Python clients, ran identity-attack simulations, measured mTLS overhead, and produced a formal device provisioning policy listing certificate generation, installation, verification, and inventory steps.
The project evaluated timestamp freshness, sequence counters, and HMAC-style tamper seals against 12 controlled replay experiments. I ran tests for immediate, delayed, and tampered replays, charted results, and recommended deploying all three protections because only their combination blocked…
Built and deployed a Flask-based anonymous message board with admin authentication, secure logging, and moderation tools. Implemented environment-variable-based admin credentials to avoid hardcoding sensitive login information in source code. Added automatic logging for user activity, including timestamps, anonymous identifiers, request data, and submitted messages. Developed moderation tools and a basic threat scoring system to help identify potentially risky or abusive submissions. Deployed and tested the application on AWS EC2 using Linux terminal workflows and portfolio-ready documentation.
Built a responsive clothing brand website for a streetwear-style project using Next.js and React. Created a dedicated shop page displaying product images, prices, and item listings with an expandable storefront structure. Implemented interactive product view behavior and organized product data/image ordering for easier future inventory updates. Tested the site locally using the Next.js development server and fixed image loading issues during development. Serve as a Brand Ambassador for Greatness Awaiting by supporting promotion, outreach, and brand visibility.