Offensive Security
Penetration testing across web, network and Systems; red teaming and adversary simulation mapped to MITRE ATT&CK. Metasploit, Burp Suite, SQLMap, Gobuster, Nmap, Nessus.
Defensive Operations
SOC Tier 1 and 2, SIEM, threat hunting, log analysis and dark-web monitoring.
Digital Forensics & IR
DFIR with Autopsy, Volatility, FTK and Wireshark. Root-cause analysis and post-incident reporting for executive audiences.
Cloud & API Security
AWS, Fortinet Cloud NGFW, CNAPP, IAM, OWASP API Top 10 and hands-on API penetration testing.
Infrastructure & Network
VMware, Active Directory, Linux and Windows Server, Palo Alto NGFW, FortiGate and VPN.
Scripting & Automation
Python, Bash and PowerShell, used to automate security tooling and repetitive analysis work.
Compliance & Standards
Cybersecurity Act B.E. 2562 (CII scope), ISO/IEC 27001 as Lead Auditor and Implementer, PDPA, ISO 9001 and ISO 20000.
Threat Intelligence
CTI frameworks and OSINT, arcX Foundation CTI Analyst, AttackIQ breach-and-attack simulation, MITRE ATT&CK.
