Currently an Extern @HydroficientAspiring IoT Cybersecurity Professional
I’m an emerging talent focused on enhancing my technical skills in IoT and cybersecurity through hands-on experience.
Work samples
Discover the projects I'm involved in, showcasing my journey in IoT and cybersecurity as I build my expertise.
About me
I’m an emerging talent focused on enhancing my technical skills in IoT and cybersecurity through hands-on experience.
I am an enthusiastic individual at the beginning of my career journey, eager to build and improve my technical skills. With a Bachelor’s degree and a current externship at Hydroficient, I'm committed to learning and growing in the field of IoT and cybersecurity.
Externships
Hydroficient IoT Cyber Defense Externship
Hydroficient
Education
Cyprus International University
B.Sc Computer Engineering · Class of 2026
Skills
✅ Verified by Extern · ⏱️ In progress
Hydroficient IoT Cyber Defense Externship
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
Overview
The project recreated a water-monitoring IoT deployment and treated it as an active target for offensive and defensive testing. Work mapped assets and CIA priorities, applied STRIDE across devices, the cloud API, dashboard and controls, and produced a threat assessment. The report listed prioritized gaps: alert-path integrity, remote shutoff risk, and dashboard account security.
.jpg)
What I've accomplished
I produced a threat assessment for a simulated hotel water-monitoring deployment that mapped assets and CIA priorities, applied STRIDE to devices, cloud API, dashboard and controls, and prioritized gaps including alert-path integrity, remote shutoff risk, and dashboard account security.
Project breakdown
On a simulated hotel deployment I mapped assets and CIA priorities, ran STRIDE against devices, cloud API, dashboard and controls, and produced a threat assessment. The report listed prioritized gaps: alert-path integrity, remote shutoff risk, and dashboard account security.
The project recreated a mock water sensor scenario, wrote a Python generator producing timestamped readings with realistic variation and anomalies, and published the code and notebook used to create the sensor logs.
I set up a local MQTT broker, ran a Python sensor publisher and a dashboard subscriber, captured plaintext MQTT traffic, and documented readable JSON fields plus how an attacker could sniff, replay, or publish fake messages.
I ran four lab experiments on the MQTT pipeline after enabling TLS: an eavesdrop test that showed encrypted traffic blocked viewing, a certificate validation test that rejected wrong CAs, a speed test that measured 1.15% latency overhead, and stress tests showing 100 msg/s success.