10 years in Physical Security to Cybersecurity Operations. I bridge the gap between real-world security protocols and digital threat landscapes through automation, log analysis, and AI-driven tooling.
A lightweight, fully functional SIEM built in Python that ingests real Linux and firewall logs, detects attack patterns, classifies them using the MITRE ATT&CK framework, and visualizes everything in a real-time web dashboard with VirusTotal IP enrichment.
| Detection Rule | MITRE ID | Tactic | Severity |
|---|---|---|---|
| SSH Brute Force | T1110 | Credential Access | 🔴 HIGH |
| Port Scan | T1046 | Discovery | 🟡 MEDIUM |
| Privilege Escalation | T1548 | Privilege Escalation | 🔴 CRITICAL |
| Credential Dumping | T1003 | Credential Access | 🔴 CRITICAL |
| Off-Hours Login | T1078 | Initial Access | 🟡 MEDIUM |
Stack: Python · Flask · Pandas · Chart.js · VirusTotal API v3 · MITRE ATT&CK
- Languages: Python (Security Automation), Bash, Linux CLI
- Security Tools: Wireshark, Nmap, SIEM, Google Chronicle, VirusTotal API
- Frameworks: MITRE ATT&CK, Zero-Trust Architecture, NIST CSF
- AI & Automation: CrewAI, Gemini 2.5 Flash, FastAPI, multi-agent systems
- Cloud: Google Cloud Platform
- ✅ TryHackMe Cyber Security 101 — Completed March 2026
- ✅ Google Cybersecurity Professional Certificate — Completed 2025
- 🔄 CompTIA Security+ — In Progress
- 🔄 TryHackMe SOC Level 1 — 2026
Log Analysis & Threat Detection Dashboard Lightweight SIEM in Python that parses Linux/firewall logs, detects attack patterns, maps them to MITRE ATT&CK, and visualizes everything in a Flask dashboard with VirusTotal IP enrichment.
AI-Powered Incident Response Triage Multi-agent system using Python and CrewAI that automates IP reputation checks via VirusTotal API. Reduces triage time by analyzing logs and providing structured summaries for human analysts.
Zero-Trust AI Web Filter Extension Chrome extension using Python + FastAPI providing real-time threat analysis. Combines DOM context scraping with the VirusTotal API and Gemini 2.5 to dynamically evaluate and block zero-day phishing and malicious web content.
System Access & Security Utility Python-based utility focused on system hardening and automated access control.
- LinkedIn: linkedin.com/in/nelson-silva-valderas
- Email: nelsonsilvavalderas@gmail.com
- TryHackMe: tryhackme.com/p/ERXL
- Current Focus: SOC Level 1 path · Building real-world detection engineering skills
