Passionate about learning and continuous improvement through hands-on experience.
2027 Goal: Grow in Blue Team & SOC — expand my home lab, earn certifications, and document real defensive security projects.

Hands-on Blue Team and Cloud Defense labs — detection engineering, host hardening, and adversary emulation documented end-to-end with MITRE ATT&CK mapping.

• Cybersecurity Ransomware Detection Lab

  Description: Heuristic ransomware simulation and autonomous containment engine analyzing Shannon entropy, filesystem deltas, and process I/O with MITRE ATT&CK mapping (T1486).




• IPTables Attack Detector

  Description: Automated real-time log analysis daemon and dynamic iptables mitigation engine with JSONL logging for SIEM integration.




• Linux C2 Egress Hardening

  Description: Adversary emulation and Linux host hardening lab: egress filtering controls, live socket auditing, and /proc memory triage against a C2 reverse shell.




• AWS S3 Exfiltration Detection

  Description: Cloud adversary emulation and detection lab: credential-less exfiltration to AWS S3 via API Gateway and Lambda pre-signed URLs, CloudFormation IaC, and CloudTrail/GuardDuty telemetry.

• Professional Developer Web Portfolio

  Description: High-performance professional web portfolio engineered as a Single Page Application (SPA) with a clean, scalable architecture. It features a minimalist premium design, dynamic bilingual support, seamless dark/light mode integration, and cinematic scroll animations.

  Technologies used:
  React 19, TypeScript, Tailwind CSS, Vite, GSAP, React Router DOM v7, Vitest.

  Key features:

  • Premium Design with cinematic effects, scroll motion, and micro-interactions orchestrated via GSAP.
  • Innovative Developer Mode featuring a custom JSON viewer that transfers the visual UI into an expandable data tree.
  • Strict Separation of Concerns (Data vs. UI) ensuring highly scalable and maintainable code.
  • Robust Automated Testing suite built with Vitest and Husky.
  • Serverless contact form processing seamlessly integrated with EmailJS.



• Point of Sale (POS) - Multiservicios Ases y Reyes

  Description: Comprehensive full-stack web system designed under a fully decoupled architecture for sales flow automation, inventory logistics control, and staff management. The ecosystem cleanly separates concerns through a robust object-oriented API and a fluid, reactive, high-performance user interface.

  Technologies used:
  Frontend: React 19, TypeScript, Tailwind CSS, Vite, React Router DOM v7, Axios.
  Backend & DB: Node.js, Express, TypeScript, TypeORM, PostgreSQL, Docker, Docker Compose.

  Key features:

  • Modular structure based on the Controller-Service pattern for advanced management (CRUD) of products, categories, and employees.
  • Secure authentication with JWT token lifecycle management (signing, expiry, and refresh).
  • SOC-oriented activity logging and auditing system for full user-action traceability.
  • Input validation and role-based access control (RBAC) across sensitive endpoints.
  • Database automation using triggers, stored procedures, and native views in PostgreSQL.
  • Bulk loading and report reading in Excel (xlsx) and notifications with Nodemailer.
  • Responsive public view (/store) optimized for end-customer interaction.



• Texas Trailers CR - Digital Ecosystem

  Description: Comprehensive hybrid digital solution (B2C and B2B) for the operational modernization of a trailer import and sales company in Costa Rica. It centralizes physical inventory and digital channels using a decoupled architecture based on the BaaS (Backend-as-a-Service) pattern, eliminating stock inconsistency between sales yards and the website.

  Technologies used:
  Web (Client): React 18, TypeScript, Tailwind CSS, Vite, React Router DOM v6.
  Cloud Infrastructure: Firebase (Firestore, Auth, Storage, Hosting).
  Mobile (Staff): Android Native, Kotlin.

  Key features:

  • High-performance public web catalog with advanced filtering systems for end customers.
  • Real-time NoSQL synchronization and integration to reflect stock changes instantly.
  • Native mobile administrative panel in Kotlin for price updates and direct photo uploads from the loading dock.
  • Identity management and BaaS security (Firebase Auth) with granular access rules for structured cloud storage of multimedia files.



• Kalova — Digital Ecosystem and Serverless Web Platform

  Description: Custom hybrid web platform designed for a wall art and decorative products brand. The system unifies end-to-end a conversion-focused public digital catalog, an intelligent multi-step quoting engine, and a robust administrative backoffice for operational and commercial business management under a fully serverless architecture.

  Technologies used:
  React 19, Vite, Tailwind CSS, React Router DOM v7, Firebase (Firestore, Auth, Storage, Hosting, Cloud Functions).

  Key features:

  • Dynamic public catalog with a 3D Coverflow carousel video showcase and galleries in Bento Grid.
  • Intelligent quoting assistant (modular step-by-step wizard) with strict data validation and optimized image uploads.
  • Administrative control panel protected by granular Firestore Security Rules and role-based access control (RBAC).
  • Complete CRUD module for autonomous management of inventories, packages, and content (lightweight CMS).
  • Serverless automation via Cloud Functions with least-privilege execution for image processing and transactional emails.
  • Seamless integrations with dynamic templates for sales follow-ups via WhatsApp.

Decorative visual representation of my GitHub activity over the past year.