About

Contained a critical CVSS 9.8 vulnerability in the core school information system before it was exploited: isolated it behind the Cloudflare WAF, timed the outage for the end of the school day, validated the vendor patch, restored service, then wrote the incident response process the organisation had been missing.

Delivered the first Juniper Mist deployment by an Australian education institution: wired and wireless across six sites, 57 switches and 160 or more access points, each from design documents through to as-built handoff. Built certificate-based network access control on top of it with 802.1X, EAP-TLS and SCEP through MDM.

Brought the firewalls, network, MDM and identity platform under Terraform, with Ansible for Windows Server and Azure Arc, and put every change through a reviewed pull request after an early change took switches offline at several sites.

Deployed IBM QRadar on premises with a Cloudflare Logpush pipeline, and run alert investigation across Sentinel, QRadar, Defender and Jamf Protect, including a recurring macOS infostealer campaign handled end to end from detection to playbook.

Wrote the organisation-wide information security and acceptable use policies against the ASD Essential 8 and NIST CSF, and led cyber assessments of newly acquired schools with risk registers that drove prioritised remediation.

Penetration-tested a live client environment during the WebSchool.au placement and delivered the findings.

Wrote a full incident report on a healthcare ransomware attack assessed against the NIST Cybersecurity Framework, and a privacy impact assessment of the Fortinet breach against the GDPR and the Australian Privacy Principles.

Designed and built a segmented homelab: OPNsense firewall, a VLAN per device class, Terraform-managed configuration, monitoring, and backups tested by restoring them.