Professional journey

Conduct internal IT audits against NIST CSF 2.0, ISO 27001, and SOC 2, driving 200+ findings to closure. Manage identity and access for 350+ users across Active Directory and Microsoft Entra ID, run IT and vendor risk assessments, and test an AI chatbot for prompt injection, jailbreaks, and sensitive data leaks.

Led governance and audit-readiness work, mapping controls to regulations and raising compliance posture 20%. Ran security awareness workshops that lifted phishing detection 30%, and researched adversarial ML threats and LLM supply chain security at the NYU Osiris Lab.

Managed Microsoft server administration, user account access, system troubleshooting, CMS/WordPress website updates, and secure faculty webpage maintenance for the NYU Economics Department.

Scaled vulnerability management with Nessus and OpenVAS across cloud, on-premises, and critical-infrastructure environments, remediating 100+ findings and cutting high-severity risk 40%. Fused CVE and CVSS intelligence into Splunk dashboards and MITRE ATT&CK-aligned playbooks, raising endpoint compliance to 95%.

Ran security assessments and penetration tests across enterprise web applications with Burp Suite, Metasploit, and OWASP ZAP, closing 150+ flaws. Monitored 24/7 SIEM event queues in Splunk and ELK and tuned correlation logic to cut false positives 28%.