Hydroficient Externship via ExternMaster's candidate at CUNY John Jay who completed an IoT cyber defense externship to gain hands-on security experience.
A collection of work from my Hydroficient IoT Cyber Defense externship and academic projects that show practical steps I took to learn IoT security.
Delivered a 15-minute live threat intelligence briefing on North Korea's Kimsuky intrusion set to an industry panel including professionals from Mandiant, BlackRock, Filigran, and GhostEye; Analyzed adversary TTPs, attack flow divergences, and victimology using the MITRE ATT&CK framework, OSINT, and
Developed a Python-based E2EE chat tool utilizing AES-GCM encryption and ECDH key exchange to ensure per-session forward secrecy, server blindness, and data integrity; Analyzed potential adversary capabilities, such as Man-in-the-Middle (MitM) attacks, to inform the implementation of Ed25519 digital
Master's candidate at CUNY John Jay who completed an IoT cyber defense externship to gain hands-on security experience.
I am Isabelle Ritter, a graduate student at CUNY John Jay College of Criminal Justice pursuing a masters degree. I have limited professional experience and I completed the Hydroficient IoT Cyber Defense externship to build practical skills in IoT security.
Externships
Hydroficient IoT Cyber Defense Externship
In progress
Experience
Waitress/Bartender
Bourbon Street · June 2024 - Present
Part-Time Office Assistant- Property Tax Law Office
Lawrence J. Berger P.C. · September 2023 - January 2024
Summer Immersion Program - Intern
Girls Who Code · July 2018 – August 2018
Education
CUNY John Jay College of Criminal Justice
Master of Science in Digital Forensics & Cybersecurity · Class of 2027
Pace University, Lubin School of Business
Bachelor of Business Administration (BBA), Business Management, minor in Computer Science · Class of 2024
Skills
Delivered a 15-minute live threat intelligence briefing on North Korea's Kimsuky intrusion set to an industry panel including professionals from Mandiant, BlackRock, Filigran, and GhostEye; Analyzed adversary TTPs, attack flow divergences, and victimology using the MITRE ATT&CK framework, OSINT, and
Developed a Python-based E2EE chat tool utilizing AES-GCM encryption and ECDH key exchange to ensure per-session forward secrecy, server blindness, and data integrity; Analyzed potential adversary capabilities, such as Man-in-the-Middle (MitM) attacks, to inform the implementation of Ed25519 digital
✅ Verified by Extern · ⏱️ In progress
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
The externship exercised attack and defense techniques against an operational IoT water-monitoring stack. The work involved exploring sensor, broker, and actuator interactions, designing and executing network-level attacks such as spoofing and replay, and implementing protocol-based mitigations including TLS and mTLS. Deliverables documented exploit steps and defensive configurations.
.jpg)
I worked through a hands-on IoT security workflow: mapping the water-monitoring architecture, demonstrating attack vectors, and producing defensive configurations and a security playbook for the deployment.
