vCISO Services Externship via Extern

CS master's student focused on cybersecurity risk assessment

I am a graduate student at Illinois Institute of Technology doing a vCISO Cybersecurity Risk Assessment externship to gain hands-on security experience.

View my work Message Me

Work samples

Projects include my vCISO Cybersecurity Risk Assessment externship work, focused on evaluating security risks and practical assessment tasks relevant to early-career growth.

ML-Based Network Intrusion Detection
ML-Based Network Intrusion Detection
Built an intrusion detection pipeline on 6.3M real network flows from CSE-CIC-IDS2018, a public benchmark of 13 attack types • Caught a model that scored perfectly in testing but missed 52K+ DoS attacks from a day of traffic it had not seen • Retrained it to detect all 13 attack types while limiting false alarms, scoring 0.84 macro F1 (1.0 = perfect) • Ran leakage checks to confirm the model learned attack behavior, not shortcuts, and projected daily alert load to test SOC viability
Pythonscikit-learnXGBoostpandas
Job Application Tracker on AWS
Job Application Tracker on AWS
Building a three-tier app (CloudFront → ALB → ECS Fargate → Aurora PostgreSQL) as dev and prod from shared Terraform modules • Users sign in via Cognito, track applications in Postgres, and upload resumes to private S3 through presigned URLs • Isolating app and database tiers in private subnets across 2 AZs, behind WAF and a CloudFront-only load balancer • Automating deployments with temporary, auto-expiring AWS credentials (OIDC) instead of stored keys, plus Checkov security scans • Monitoring with CloudWatch alarms and dashboards, auditing with CloudTrail and Macie, and tracking cost with Infracost
TerraformAWSDockerPostgreSQLGitHub Actions
Isolated Cyber Range & Passive Reconnaissance
Isolated Cyber Range & Passive Reconnaissance
Deployed a segmented 4-VM attack lab (Kali; Metasploitable3 and Windows Server 2016 targets) isolated from outside networks • Mapped 5 Windows security controls (Defender, firewall, IE ESC, DEP, updates) to the attack techniques each one stops • Enumerated subdomains and org metadata through passive OSINT (CT logs, WHOIS, Shodan) with zero contact to targets
VirtualBoxKali LinuxBash
Program Analysis Tooling
Program Analysis Tooling
Built an Android static analyzer (Soot) that flags apps calling sensitive APIs, checked against 32,000+ permission mappings • Used angr symbolic execution to automatically find the inputs that make a compiled program reach a chosen line of code • Built a Slither tool that maps data dependencies in Solidity smart contracts to trace how state flows through a multi-signature wallet
JavaPythonSootangrSlither

About me

I am a graduate student at Illinois Institute of Technology doing a vCISO Cybersecurity Risk Assessment externship to gain hands-on security experience.

I am Oreoluwa Adebayo, a Computer Science master's student at Illinois Institute of Technology. I have limited formal work experience and am completing a vCISO Cybersecurity Risk Assessment externship to build practical skills in security and risk assessment.

Externships

vCISO Cybersecurity Risk Assessment Externship

vCISO Services

Experience

Process Engineer, Channahon, IL

INEOS Styrolution · Jan 2023 – Jul 2024

Process Engineer, Kankakee, IL

Armstrong Flooring · Jul 2021 – Jan 2023

Education

Illinois Institute of Technology

M.S. Computer Science, Cybersecurity · Class of 2026

Calvin University

B.S. Engineering, Chemical Engineering · Class of 2021

Skills

Computer Science fundamentalsCybersecurity risk assessmentSecurity assessment methodologiesTechnical problem solvingGraduate-level research and courseworkPython

Back to work

ML-Based Network Intrusion Detection

Built an intrusion detection pipeline on 6.3M real network flows from CSE-CIC-IDS2018, a public benchmark of 13 attack types • Caught a model that scored perfectly in testing but missed 52K+ DoS attacks from a day of traffic it had not seen • Retrained it to detect all 13 attack types while limiting false alarms, scoring 0.84 macro F1 (1.0 = perfect) • Ran leakage checks to confirm the model learned attack behavior, not shortcuts, and projected daily alert load to test SOC viability

Pythonscikit-learnXGBoostpandas

View all work

Back to work

Job Application Tracker on AWS

Building a three-tier app (CloudFront → ALB → ECS Fargate → Aurora PostgreSQL) as dev and prod from shared Terraform modules • Users sign in via Cognito, track applications in Postgres, and upload resumes to private S3 through presigned URLs • Isolating app and database tiers in private subnets across 2 AZs, behind WAF and a CloudFront-only load balancer • Automating deployments with temporary, auto-expiring AWS credentials (OIDC) instead of stored keys, plus Checkov security scans • Monitoring with CloudWatch alarms and dashboards, auditing with CloudTrail and Macie, and tracking cost with Infracost

TerraformAWSDockerPostgreSQLGitHub Actions

View all work

Back to work

Isolated Cyber Range & Passive Reconnaissance

Deployed a segmented 4-VM attack lab (Kali; Metasploitable3 and Windows Server 2016 targets) isolated from outside networks • Mapped 5 Windows security controls (Defender, firewall, IE ESC, DEP, updates) to the attack techniques each one stops • Enumerated subdomains and org metadata through passive OSINT (CT logs, WHOIS, Shodan) with zero contact to targets

VirtualBoxKali LinuxBash

View all work

Back to work

Program Analysis Tooling

Built an Android static analyzer (Soot) that flags apps calling sensitive APIs, checked against 32,000+ permission mappings • Used angr symbolic execution to automatically find the inputs that make a compiled program reach a chosen line of code • Built a Slither tool that maps data dependencies in Solidity smart contracts to trace how state flows through a multi-signature wallet

JavaPythonSootangrSlither

View all work