Eight years running federally regulated aviation security operations for American Airlines. Now CompTIA Security+ certified, B.S. in cybersecurity summa cum laude, and building evidence-first defensive tooling in public. Every claim on this page maps to a repo, a credential, or a document.
Most junior analysts learn high-stakes procedure on the job. I brought eight years of it with me — international flight operations under FAA, OSHA, IATA and CBP requirements, with a security clearance and CBP badge endorsement.
As an Aviation Security Operations Crew Chief at American Airlines in Charlotte (2015–2023), the daily work was identity validation, access control, and high-accountability documentation — with recurrent incident-response and safety/security training. That discipline is the foundation: precise notes, clean escalation, no unverified claims.
In January 2025 I earned CompTIA Security+ ce (SY0-701); in December 2025 I completed a B.S. in Information Technologies with a cybersecurity concentration at Southern New Hampshire University — summa cum laude, 3.96 GPA, inducted into the Sigma Psi chapter of Alpha Sigma Lambda. Along the way I built and published the defensive projects in section 03: an agent-configuration framework on npm and a reproducible MITRE ATT&CK-aligned benchmark for AI coding agents.
Target roles: SOC Analyst · Security Operations Analyst · Cybersecurity Analyst · Incident Response Analyst · Junior Detection Engineer · Security Automation. Available for full-time work now.
One spec, many agents
A configuration framework for agentic AI coding assistants: author your project rules once, and AgentForge renders them for six adapter targets — Claude Code, Codex, Gemini CLI, Cursor, Aider, and a generic fallback. Published to npm and proven, not promised.
Can AI agents build defensible defensive tooling?
A reproducible, defensive cybersecurity benchmark: seven AI coding agents each built MITRE ATT&CK-aligned defensive tooling from the same spec, and every artifact was scored against a 100-point rubric — ATT&CK mapping discipline, prompt-injection resistance, evidence citation, uncertainty handling (“No Clear Mapping”), detection ideas, remediation guidance, and analyst follow-up questions.
Track, filter, remediate
A Python/Flask/SQLite dashboard for vulnerability tracking: full CRUD, KPI cards, search, filtering, and severity states — the record-keeping half of vulnerability management, kept small and legible.
Rule-based + statistical triage
Rule-based and statistical detection over authentication and network logs with Python, pandas and NumPy — built for anomaly triage: surface the outliers, keep the evidence, write the escalation note.
Delivery Associate
Fossa Logistics LLC (Amazon DSP)
Courier & Logistics Specialist
United States Postal Service
Aviation Security Operations Crew Chief
American Airlines
B.S. Information Technologies — Cybersecurity concentration
Southern New Hampshire University · summa cum laude · 3.96 GPA · Alpha Sigma Lambda (Sigma Psi chapter)
CompTIA Security+ ce (SY0-701)
Issued January 7, 2025 · valid through January 7, 2028
Hiring for a SOC, security operations, incident response, detection or security automation seat? The fastest route is email — the receipts are one click away.
kurdi.michael.it