I turn malware behavior into signals defenders can act on.
I'm a cybersecurity researcher and backend engineer focused on understanding malicious behavior, engineering reliable detections, and building secure systems that help analysts respond faster.
- Co-author of Burnyard: Future of Malware Analysis, an emulation-driven platform for behavioral malware analysis
- Analyzed behavior across 60+ malware families without detonating samples on the host
- Built detection workflows with YARA, Sigma, Suricata, Zeek, Wazuh, and ELK/OpenSearch
- Develop secure Python backends with FastAPI, Django, Celery, Redis, PostgreSQL, and Docker
- MS in Computer Science and Engineering from The Ohio State University, specializing in systems and network security
- Based in Columbus, Ohio and available for full-time roles beginning October 2026
Burnyard uses CPU emulation to analyze PE and ELF binaries and capture syscall traces, network callbacks, file activity, and registry changes as structured behavioral indicators—without the cost and exposure of traditional VM sandboxing.
| Project | What it does | Stack |
|---|---|---|
| Project Pegasus | Runs analysis jobs asynchronously inside network-isolated, capability-dropped containers and re-serves cached results by hash. | FastAPI, Celery, Redis, PostgreSQL, Docker, React |
| Advanced Pcap Xray v2 | Turns PCAP and live Zeek telemetry into interactive topology maps with geolocation and malicious-actor context. | Python, Zeek, PCAP, Network Forensics |
| Orion | Automates malicious-IP detection, enrichment, alerting, and reporting with resilient API fallback logic. | Python, Bash, Threat Intelligence |
| Automated IPS Rule Generator | Converts malicious-IP intelligence into deployable Suricata rules for repeatable, real-time blocking. | Python, Suricata, IDS/IPS |
| Malware Classification | Classifies PE and ELF malware families with a CNN trained on extracted static features. | Python, TensorFlow, CNN |
| Malware Clustering | Groups PE and ELF samples using EMBER features, K-Means, and DBSCAN for triage and label enrichment. | Python, EMBER, K-Means, DBSCAN |
The contribution graph updates automatically from my public GitHub commit history.
Detection & analysis
ELK OpenSearch Wazuh Suricata Zeek Snort YARA Sigma Wireshark MITRE ATT&CK
Malware research & reverse engineering
Ghidra IDA x64dbg Volatility capa Qiling angr CAPE Cuckoo Sandbox
Software & infrastructure
Python Bash SQL C Java JavaScript FastAPI Django Flask Celery Redis PostgreSQL Docker Kafka AWS GCP Linux
AI/ML & governance
LoRA RAG PyTorch TensorFlow NIST 800-53 ISO 27001:2022
I'm interested in opportunities across malware analysis, threat research, detection engineering, SOC, and backend security engineering where I can work close to the threat and turn research into practical defensive capability.