Work / Systems & projects

Systems and engineering work.

AegisGraph makes security investigation inspectable. CreditOps AI presents recorded trading-incident analysis. TradeFlow makes trading-workflow tests and their evidence visible. CreditFlow QE connects a banking simulator to independent Java API automation.

Selected systems

Security / AI / Fintech test engineering

Security engineering / AI systems

AegisGraph

Active

A security investigation engineering platform for synthetic fintech telemetry: scenario replay, evidence-grounded AI, hypothesis tracking, and detection regression.

The model is not the system of record. Typed claims require validated evidence; persistent review decisions remain human-controlled.

AegisGraph V2 synthetic Atlas replay paused with three alerts, the first correlated incident, and causal processing stages. — Synthetic Atlas replay connects observations to alerts and correlation, with compressed source-time gaps disclosed. Recorded in the September 23 public-mode rehearsal.

Fintech investigation / AI systems

CreditOps AI

Completed

Recorded investigations of synthetic trading incidents, connecting diagnostic evidence with RFQ/order impact, assessment review, and human handoffs.

Recorded playback makes no fresh model or MCP diagnostic calls; accepted assessments remain advisory and require human review.

Fintech systems / Test engineering

TradeFlow

Completed

A synthetic trading workstation that makes test ownership, API contracts, and three-browser workflow validation inspectable.

Test-owned sessions connect exact-record UI assertions with API state checks.

TradeFlow synthetic order blotter with server-side filters, lifecycle states, and a LIMIT order ticket. — Synthetic order book and LIMIT ticket. Each session owns its records; submission creates a NEW order without simulating execution.

Financial systems / Quality engineering

CreditFlow QE

Active

A transactional credit-card simulator with independent Java, Cucumber and REST Assured automation, plus executed CI and browser-test evidence.

Independent Java/Cucumber automation validates a synthetic transactional credit-card API.

CreditFlow QE hosted simulator after a synthetic $50 payment — Actual Playwright journey: $200 outstanding, $800 available and one committed payment.

Supporting security engineering

Application / Detection / Remediation / Cloud

Application security / DevSecOps

SecurePay / DevSecOps Pipeline

Completed

A synthetic payments API with tested security gates that distinguish scanner findings from failed or missing evidence.

Detection engineering

Detection Engineering Lab

Completed

Windows behavior detections with executable Sigma rules, evidence-linked investigations, and a fixture-tested tuning lifecycle.

Security engineering / Cloud security

Cloud Security

Completed

A deterministic Python lab for AWS-style posture assessment, audit-event detection, and remediation verification, tested against versioned synthetic fixtures and reproducible reports.

Security engineering / Vulnerability management

Vulnerability Management

Completed

A Python workflow for scanner normalization, explainable remediation priority, and closure verified against matching rescans, with reproducible synthetic and local Trivy evidence.

Additional public material

Response / Hunting

Incident Response Playbooks Threat Hunting Playbooks