SOC Analyst · Security Engineering · OT/ICS & Critical Infrastructure Defense · FedRAMP 20x
B.A.S. Cyber Operations (Cyber Engineering Emphasis), University of Arizona '26 · Tucson, AZ
I learn by building. I spent a year and a half helping build and run an OT/ICS Security Operations Center for the University of Arizona's Facilities Management team: an Elastic Stack SIEM ingesting ~2.5 million events a day across three facility sites, with Suricata IDS, Zeek NSM, and custom ICS alert pipelines normalized to Elastic Common Schema.
I graduated in May 2026, and now I'm building TalonSocLab, a home SOC. I also research how agentic AI holds up in real security operations and continue to learn and expand my cybersecurity skills.
Lately that has pulled me into FedRAMP 20x. I built ComplyRoll, an open-source tool that compiles STIG and SCAP output into schema-valid FedRAMP vulnerability reports and reads every response deadline out of FedRAMP's published rules dataset instead of hardcoding it. Building against that dataset turned up five rules that state a cadence in prose but never encode it, which I raised with FedRAMP directly.
- 🛠️ Building TalonSocLab
- 📋 Building ComplyRoll, FedRAMP 20x vulnerability reporting
- 🔐 CompTIA Security+ in progress
- 🟩 Hack The Box CJCA, CDSA track
- ✍️ Writing up each lab phase at ktalons.github.io
Detection & SIEM
Network & Endpoint Monitoring
Offensive & Assessment
Platforms & Infrastructure
Languages
Frameworks & operations: MITRE ATT&CK · MITRE CAR · NIST CSF 2.0 · NIST 800-53/800-171 · CIS Controls · ISO 27001 · FedRAMP 20x · DISA STIG/SCAP · GLPI · osTicket · OpenCTI
- 🎓 B.A.S. Cyber Operations, Cyber Engineering Emphasis · University of Arizona, May 2026 · Degree · Dean's List (Spring '26, Fall '25, Spring '25, Fall '24)
- 📜 Undergraduate Certificate in Cyber Operations · University of Arizona, May 2026 · Certificate
- 🛡️ Google Cybersecurity Professional · Coursera Certificate (Sep 2025)
- 🤖 Vanderbilt: Generative AI Cybersecurity and Privacy for Leaders · Coursera (Nov 2025)
- 🔐 CompTIA Security+ · in progress
- 🏆 NCL Fall 2025 · Team 100/4,214 | Individual 447/7,875 | Verify
- 🏆 NCL Spring 2026 · Team 264/3,634 | Individual 474/7,009 | Verify
- ⛰️ Mountain West Cyber Challenge 2026 · Team 12th place
CTF Captain, Cyber Saguaros · University of Arizona (Mar 2025 to May 2026)
Led teams of 4 to 8 across defensive and offensive competitions.
Cyber Range Volunteer · Saguaros CyberHub (Apr 2025 to Feb 2026)
Supported Proxmox VM deployments, secure network segmentation, and firewall rule testing for training scenarios.
Open to connecting about security engineering, detection architecture, OT/ICS security, FedRAMP 20x and compliance automation, or AI for cyber defense.