// available for opportunities
Aspiring cybersecurity professional and fullstack developer with a passion for understanding how systems work — and how to protect them.
// 01
I finished Running Start at Bellevue College with an Associate of Arts and Sciences and I'm now studying Cybersecurity at Seattle University.
My interest in cybersecurity grew naturally from building things: once you understand how web apps, servers, and networks are put together, you start seeing exactly where they can break. I want to pursue a career that sits at that intersection of building and defending.
Outside of tech, I play in a band — which taught me that creative projects and technical ones have more in common than people think: both take persistence, iteration, and knowing when something just isn't right yet.
// 02
// 03
Instant cross-device file sharing over WebRTC data channels with QR/code pairing. Files transfer peer-to-peer through an ECDH handshake into an AES-GCM encryption pipeline, with a Socket.IO relay fallback for NAT traversal and password-protected share links (scrypt-hashed).
A period and cycle tracking web app with cycle prediction, confidence scoring, sleep tracking, partner mode, and doctor-ready PDF reports. Built with Google OAuth and deployed as a PWA, with a React Native mobile app via Expo.
An open-source PyQt6 desktop pentesting application with a full HTTP/HTTPS intercepting proxy (Repeater, Intruder, Scanner, Logger, Site Map), a findings tracker with CVSS scoring and Obsidian-compatible Markdown export, and a utility belt covering reverse shell generation, hash identification, and security header analysis.
A fullstack web application featuring user authentication and personalized data persistence. Users can register, log in, and manage their own todo lists — all stored in a PostgreSQL database with secure session handling.
A frontend website for my band. Designed and built entirely from scratch with a focus on aesthetics and user experience — a real-world client project where I was both the developer and the client.
Repurposed a Raspberry Pi into a self-hosted penetration testing range. Built a custom Claude Code skill that generates numbered vulnerable Flask web apps (SQL injection, XSS, IDOR, SSRF, JWT abuse, mass assignment) and SSH-based server challenges (privilege escalation, GTFOBins), tuned to close specific skill gaps and tracked across 8+ labs.
Self-hosted WireGuard VPN server on Oracle Cloud with full infrastructure control. Includes a custom web dashboard that aggregates VPN, honeypot, and ad-blocker activity into a single unified log — making the whole stack visible in one place. A honeypot captures and logs unsolicited connection attempts, and a built-in network-level ad blocker filters traffic for all connected devices.
A shell command explainer that hooks into Claude Code's pre-execution pipeline. Intercepts bash commands and returns plain-English explanations from a locally-indexed tldr-pages SQLite database — no API calls, instant offline lookups.
A custom AI voice assistant built on a dedicated ThinkPad, training custom Piper TTS voices on GPU. Somab listens continuously for conversation context, responds via streamed TTS, and displays an animated face with dynamic expressions and mood perception, with a long-term goal of moving onto a custom carrier PCB for a Jetson Orin NX.
// 04
Seattle University
In progress, started 2026 · Continuing on from Running Start into a full Cybersecurity program.
Bellevue College — Running Start Program
Completed 2026 · 3.75 GPA, Honor Roll · Dual-enrollment through Cedarcrest High School Running Start.
// 05
ISC² — International Information System Security Certification Consortium
Entry-level cybersecurity certification covering security principles, network security, access controls, incident response, and security operations. All 5 domains complete — sitting the exam soon.
Course CompleteTryHackMe — Hands-on Security Labs
Practical, browser-based cybersecurity training covering networking fundamentals, Linux CLI, web fundamentals, and hands-on labs.
CompletedCisco Networking Academy
Covers cybersecurity fundamentals including common threats and attacks, network defense strategies, data protection, and how organizations respond to incidents.
Completed// 06
Active study and hands-on training — updated as I progress.
Following up the completed Pre-Security path with SOC-focused training — log analysis, alert triage, and incident response fundamentals. In progress.
All 5 domains complete via the official ISC² self-paced training: Security Principles, BC/DR & Incident Response, Access Controls, Network Security, and Security Operations. Preparing to sit the exam.
// Current Focus Areas
// 07
I'm actively looking for opportunities in cybersecurity — internships, entry-level roles, or just a conversation. Don't hesitate to reach out.