Hydroficient Externship via ExternI build and defend IoT systems, practicing attacks and mitigations to learn real-world cyber defense.
My portfolio highlights hands-on work from the Hydroficient externship: threat simulations, exploit testing, and deploying transport-layer defenses for IoT infrastructure.
.jpg)
Hydroficient · ✅ Verified by Extern · ⏱️ In progress
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
Deployed a Windows Server 2022 Active Directory environment on AWS with Terraform for 25 users across five departments, configuring AD DS, DNS, OUs, security groups, Group Policy, and file-share permissions. Administered accounts with Active Directory and PowerShell for provisioning, offboarding, password resets, and group changes; wrote runbooks for account-lockout investigation and common support procedures. Built a Jira Service Management help desk with request types, queues, SLAs, and automation rules; resolved 20 simulated Tier 1/Tier 2 tickets covering authentication, account access, DNS, file shares, and onboarding.
I build and defend IoT systems, practicing attacks and mitigations to learn real-world cyber defense.
I am a senior at California State University Northridge working toward a bachelors degree. I have limited formal work experience and I am building hands-on skills in IoT security through an externship focused on attacking and defending real devices and networks.
Externships
Hydroficient IoT Cyber Defense Externship
In progress
Experience
Behavioral Therapist
IECP / Amergis · Feb 2025 – Present
Production Technician
Silvus Technologies · Apr 2023 – Aug 2024
Technical Support Specialist
Icon Chalk Integrated Farms · Aug 2018 – Sep 2021
Education
California State University, Northridge
Bachelor of Science in Computer Information Technology, Minor in Finance.
Skills
✅ Verified by Extern · ⏱️ In progress
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
The work evaluated a hotel's HYDROLOGIC IoT water-monitoring deployment by inventorying devices and mapping data flows, then applying the STRIDE framework and the CIA triad. It produced a threat model and attack reports that identified weak/default passwords, command tampering risks, and a cloud single point of failure, and recommended concrete mitigations.
I produced a threat model and accompanying attack reports that documented devices and data flows, identified weak/default credentials, command tampering, and a cloud single point of failure, and proposed concrete mitigations.
I analyzed the hotel's HYDROLOGIC system, inventoried devices and data flows, applied STRIDE and CIA, and produced a threat model that identified weak/default passwords, command tampering, and a cloud single point of failure as the top three risks, with concrete mitigations.
During the sensor-generator task I built a Python notebook that simulated timestamped water-sensor readings, produced realistic variation and anomalies, and exported logs for analysis. The submission included the runnable Colab and an exported log file.
Deployed a Windows Server 2022 Active Directory environment on AWS with Terraform for 25 users across five departments, configuring AD DS, DNS, OUs, security groups, Group Policy, and file-share permissions. Administered accounts with Active Directory and PowerShell for provisioning, offboarding, password resets, and group changes; wrote runbooks for account-lockout investigation and common support procedures. Built a Jira Service Management help desk with request types, queues, SLAs, and automation rules; resolved 20 simulated Tier 1/Tier 2 tickets covering authentication, account access, DNS, file shares, and onboarding.
Built an AWS threat-detection pipeline using CloudTrail, GuardDuty, Security Hub, EventBridge, SNS, Lambda, and CloudWatch to route high-severity findings to email alerts and a Python Lambda for incident parsing and logging. Validated the pipeline with synthetic findings and an authorized EC2 credential-exfiltration test that produced a severity-8 GuardDuty detection; documented architecture, test evidence, and procedures in GitHub.
