Cybersecurity graduate from Lisbon, starting my MSc in Cybersecurity & Resilience at ISCTE. I learn by building: I design and operate my own production-grade homelab, publish open-source security tools, and document everything with as-built reports — problems, causes and fixes included.
🎯 Looking for a cybersecurity internship — SOC · Vulnerability Management · AppSec
🛡️ headguardPython · FastAPI · pytest · CI
|
DevSecOps end to end: vulnerable app → SAST/DAST pipeline blocks the merge → fixes verified by the same pipeline. Full red→green story, screenshots included.
Flask · GitHub Actions · Semgrep · ZAP
|
NIST CSF 2.0 self-assessment of my own infrastructure — every control with linked evidence. GRC applied to something real, not a textbook.
NIST CSF 2.0 · EN + PT
|
Personal infrastructure I design, build and operate — production-grade, online 24/7:
| Layer | What's inside |
|---|---|
| 🌐 Network | pfSense firewall · 6 segmented VLANs (mgmt, servers, trusted, IoT, guest, lab) · default-deny + least-privilege rules · fully isolated security lab for offensive work |
| 🔐 Access | WireGuard VPN with dynamic DNS + split tunnel · a single UDP port exposed to the Internet · all admin via VPN or internal VLANs only |
| 🖥️ Platform | Proxmox VE hypervisor · VMs + unprivileged LXCs · Docker with versioned stacks · Portainer |
| 📦 Services | Vaultwarden (secrets, 2FA) · CouchDB (E2E-encrypted notes sync) · reverse proxy with automated Let's Encrypt TLS (wildcard via Cloudflare DNS-01) · Uptime Kuma status page |
| 📐 Operations | As-built documentation for every project · troubleshooting runbooks · network inventory (IPAM) · follow-up register · NIST CSF 2.0 self-assessment |
Numbers: 6 VLANs · 8+ monitored services · 1 exposed port · 100% TLS on web services
Security
pfSense · WireGuard · Wazuh (SIEM) · OWASP ZAP · Semgrep · Wireshark · hardening · NIST CSF
Infra & DevOps
Languages
📬 Open to internships — reach me on LinkedIn
Profile assets: capsule-render · typing-svg · shields.io · skillicons