I practice building and defending real IoT systems through an active externship, honing technical cybersecurity skills for practical environments.
Portfolio entries focus on hands-on IoT security tasks performed during the Hydroficient externship, including offensive testing, defensive implementations, and documented remediation steps.
.jpg)
Hydroficient · Aug 2026 · ✅ Verified by Extern
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
I practice building and defending real IoT systems through an active externship, honing technical cybersecurity skills for practical environments.
I am a graduate student at Saint John's University pursuing a masters degree. I have some hands-on experience with IoT security from an active Hydroficient IoT Cyber Defense externship, where I practiced offensive and defensive techniques on real devices while building a security playbook. I am focused on improving technical skills in cybersecurity and IoT systems.
Externships
Hydroficient IoT Cyber Defense Externship
Completed · Aug 2026
Experience
Cyber Security Anlayst Intern
Rhymetec · Nov 2026
Software Engineer Intern
Institute for Machine Learning · Oct 2024 - Dec 2024
Education
St. John's University
B.S. Cyber Security Systems · Class of 2026
St. John's University
M.S. Cyber and Information Security · Class of 2028
Skills
✅ Verified by Extern
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
The work examined a 500-room hotel's water-monitoring IoT system, documenting its architecture and producing an asset inventory with CIA priorities. The project applied STRIDE to sensors, brokers, actuators, and the management dashboard and produced a written threat model that highlighted top risks such as compromised dashboard access, spoofed device readings, and denial-of-service scenarios.
I delivered a STRIDE threat model with CIA-prioritized assets and mitigation notes; a Python notebook that generates timestamped sensor data with persistent counters and injected anomalies; an analysis of data observable by an unauthenticated MQTT subscriber; TLS test results showing unauthorized listeners were blocked; and a Device Provisioning Policy implementing mTLS with scripted certificate
