security-portfolio

Identity governance & continuous assurance GRC program (synthetic B2B SaaS) — SOC 2 CC6, risk register, control testing, automation

Security & automation portfolio + blog. Source for pranaymokida.xyz

This project visualizes NEXRAD radar data, state boundaries, and street maps using OpenLayers and TMS layers. It overlays hazard markers and supports interactive map controls, integrating external tile services and AJAX-based data loading.

A cybersecurity portfolio project demonstrating vulnerability scanning, risk analysis, reporting, remediation tracking, and compliance auditing with Tenable Nessus.

Hands-on cybersecurity portfolio focused on AWS cloud security, detection engineering, log analysis, API security, and security automation.

Synthetic Microsoft Purview DLP policy lab with sample policies, exception workflow, alert triage, governance process and KPI/KRI dashboard for sensitive data protection.

Simulated AWS IAM compromise (leaked key, no-MFA login, privilege escalation, unauthorized EC2) detected and investigated end-to-end using CloudTrail + Athena — fully documented, $0 cost, AWS Free Tier.

Web, mobile and AI/LLM security portfolio by O-SQZ

a personal cybersecurity portfolio website design for security researchers, bug bounty hunters, and ethical hackers who want a simple, professional online presence.

A comprehensive collection of common programming questions, solutions, and best practices covering various topics from coding challenges to security concepts.

Simulated Windows Active Directory account lockout investigation demonstrating authentication log analysis, IAM troubleshooting, incident documentation, and security escalation

A hands-on cybersecurity portfolio showcasing log analysis, threat detection, Python scripting, and defensive security projects.

checks SSL cert on selected host and can output to screen or text file

Educational multi-tenant RAG (FastAPI, PostgreSQL, ChromaDB): pentest, fixes, observability and threat detection (Loki, Grafana, MITRE ATT&CK).

Contractor Training Platform: A comprehensive, production-grade tutorial system designed to onboard contractors to the FBI's official Crime Data Explorer interface. Built with enterprise-level architecture and authentic government styling for professional law enforcement training.

30 years of NOAA-verified flood data for the Charleston, SC metro — interactive map, risk zones, and location decision analysis.

Detect fraudulent job emails targeting US security clearance holders and job seekers.

This repository demonstrates end-to-end security engineering capabilities: Software assurance (SAST, SCA, DAST) with reports Secure web development and OWASP Top 10 countermeasures Reverse engineering (static/dynamic) of a benign C challenge binary Risk reporting, briefings, knowledge transfer

Identity-first detection engineering app for CloudTrail IAM events, nested access paths, and explainable SOC risk investigation.

Offline synthetic IAM review lab comparing Entra-style identity data with HR records using deterministic governance rules and Markdown reports.