Experienced technology professional with a strong interest in information security, cloud security, and security operations. Passionate about leveraging technology to safeguard digital assets, enhance security posture, and ensure regulatory compliance.

Education & Certifications
CompTia Security+, Issuer: CompTIA⁠
Diploma, Cybersecurity, Lighthouse Labs
Bachelor of Science, Economics and Geography, Memorial University of Newfoundland
Certificate of Cloud Security Knowledge, Issuer: Cloud Security Alliance⁠
AWS Certified SysOps Administrator - Associate, Issuer: Amazon Web Services, In Progress
Skills
Tools — AWS, Wireshark, Nmap, Qualys, OpenVAS, Snort, Wazuh, Splunk, Zeek, ELK, MISP, Autopsy, Registry Explorer, Grep/Regex.
Networking — TCP/IP, HTTP/HTTPS, OSI Model, DNS, VPN, VLAN, Firewalls, IDS/IPS.
Operating Systems — Windows, Linux (Kali, Ubuntu).
Scripting & Query Languages — YARA, Javascript, Python, SQL, PowerShell.
Frameworks, Methodologies & Compliance — NIST RMF & CSF, MITRE ATT&CK, OWASP, PIPEDA, CASL, GDPR, CAN-SPAM.
Professional Experience
Cybersecurity Analyst Team Lead (Internship), Ogow Health
Aug 2024 – Sep 2024 | Remote
  • •Led a team of 5 analysts in a web application vulnerability assessment using Qualys, uncovering 6 critical vulnerabilities that were prioritized for immediate remediation to reduce risk exposure across key systems.
  • •Collaborated with cross functional teams to develop a cybersecurity awareness guide covering phishing, password hygiene, and social engineering, improving employee security posture across departments.
  • •Conducted a targeted security assessment of the organization's web servers and network systems, utilizing Nmap, Nikto, and Gobuster to identify misconfigurations, exposed directories, and potential attack vectors for remediation.
  • •Developed a hardening guide with actionable recommendations to mitigate vulnerability impact by 75% across servers, workstations, and network devices as measured by follow up scans.
    • IT Support & Marketing Automation Specialist, Independent Business Consultant
    May 2018 – Dec 2024 | St. John's, Canada

    Cybersecurity & Compliance

  • •Configured and implemented SPF, DKIM, and DMARC email authentication protocols, reducing spoofing and phishing risks by 90%.
  • •Leveraged log analysis to monitor email deliverability and detect anomalous activity, enabling early identification of potential security threats.
  • •Investigated and resolved email-based security incidents, improving incident response time and strengthening organizational email hygiene.
  • •Enforced compliance with regulatory frameworks including CASL, PIPEDA, GDPR, and CAN-SPAM, ensuring risk reduction and lawful data practices.
  • •Analyzed email system logs to troubleshoot and refine automated workflows, increasing security and performance of campaign pipelines.

    • Technical Support & Automation

  • •Managed secure SaaS platform integrations, performing system checks and post-integration validation to ensure data integrity and minimize security misconfigurations.
  • •Maintained high levels of client satisfaction through responsive technical assistance and clear communication with stakeholders.
  • •Designed and deployed an automated solution using JavaScript, Google Vision API, and Google Sheets to analyze over 500 businesses' online ad activity, reducing manual processing time by 40%, which led to a 25% increase in productivity and faster decision-making.
  • •Presented marketing and technical insights to both technical and non-technical audiences, aiding strategic business decisions.
    • Quality Assurance Analyst, Other Ocean Interactive
    Apr 2016 – May 2018 | St. John's, Canada
  • •Developed comprehensive test plans, scenarios, and procedures for mobile, desktop, and video game applications, ensuring thorough coverage of security vulnerabilities, functionalities, and overall system integrity.
  • •Identified, documented, and reported security vulnerabilities and application bugs, contributing to improved security posture and system resilience.
  • •Collaborated with developers and stakeholders to provide actionable feedback on security weaknesses, application usability, and functionality, fostering a proactive approach to risk mitigation.
  • •Documented test results and provided regular progress updates, ensuring clear communication and alignment with project stakeholders on testing outcomes and next steps.
    • Projects & Extra Curricular
    SOC Training - TryHackMe
  • •Investigated security anomalies using Splunk and ELK, deepening analytical abilities and honing the use of SIEM for detecting and responding to threats
  • •Gained hands-on experience with using Cyber Defence Frameworks to establish a strong security posture and defensive strategies.
  • •Developed proficiency in configuring and managing security tools.
  • •Applied forensic knowledge to practical scenarios, investigating incidents involving Windows and Linux systems.
  • •Used Autopsy to investigate disk image artifacts and conducted an inquiry into potential data exfiltration by an employee.
  • •Performed memory analysis and identified Indicators of Compromise (IOCs) on endpoints using Redline.
  • •Used Snort to defend against live attacks by applying real-time detection rules.
  • •Acquired practical skills in using various threat intelligence tools, learning how to identify and leverage available security information to mitigate and manage potential adversary actions.
  • •Gained a comprehensive understanding of Network Security and Traffic Analysis to identify and investigate network anomalies using industry-standard tools and techniques.
    • DevSecOps Training - TryHackMe
  • •Developed proficiency in best practices for cloud IaC using automation tools, ensuring secure deployment in cloud environments.
  • •Applied security principles to CI/​CD pipelines and build processes to protect and automate deployment workflows.
  • •Explored container security fundamentals, including Docker and Kubernetes, and how to identify and secure container vulnerabilities.
  • •Configured and managed IAM user groups with tailored permission policies to streamline access management.
  • •Created IAM user accounts and strategically assigned them to appropriate user groups to enforce role-based access control.
  • •Conducted user permission testing to verify accurate access levels.
    • PwC Switzerland Cybersecurity Job Simulation
  • •Completed a job simulation involving cybersecurity for PwC Digital Intelligence, gaining experience in understanding and explaining the concept of integrated defence.
  • •Developed expertise in integrated defence strategies and their application in real-world scenarios.
  • •Conducted risk assessments and formulated security recommendations for a client.
  • •Demonstrated proficiency in cybersecurity terminology, network segmentation, and firewall configuration.
    • Mastercard Cybersecurity Virtual Work Experience
  • •Completed a job simulation where I served as an analyst on Mastercard’s Security Awareness Team.
  • •Helped identify and report security threats such as phishing.
  • •Analyzed and identified which business areas needed more robust security training and implemented training courses and procedures for those teams.
    • AIG Shields Up Cybersecurity Job Simulation
  • •Completed a cybersecurity threat analysis simulation for the Cyber Defense Unit, staying updated on CISA publications.
  • •Researched and understood reported vulnerabilities, showcasing analytical skills in cybersecurity.
  • •Drafted a clear and concise email to guide teams on vulnerability remediation.
  • •Utilized Python skills to write a script for ethical hacking, avoiding ransom payments by bruteforcing decryption keys.