// SELECTED WORK

Projects

Six deep-dives into the systems I've built. Each represents a complete infrastructure layer — not a tutorial project, not a demo, but production-grade work running at scale. Click any card to expand.

AI / Orchestration

Autonomous SOC — Agent Fabric

Production-grade multi-agent AI fabric with Tier 4 execution harness

7+

Concurrent agents

<30s

Task dispatch latency

100%

Tier-1 coverage

Claude / Codex / OpenCode / AntigravityMCP (Model Context Protocol) serversGraphiti (temporal KG)FalkorDB+5
[+]
Data / Pipeline

Enterprise Log Pipeline

Stream processing from raw syslog to normalized OCSF at scale

10k+

Events / sec

<2s

Ingest latency

100%

Raw retention (MinIO)

Cribl StreamKafka (KRaft 3-node)ClickHouseMinIO+2
[+]
Security / Detection

Threat Detection & XDR Engine

Behavioral correlation with multi-source alert and endpoint telemetry fusion

40+

Correlation rules

<5s

Triage latency

3

IOC feed sources

PythonRedisClickHouseMISP+3
[+]
Security / Automation

SOAR Automation Platform

End-to-end incident lifecycle — detection to post-quantum comms

6

Automated workflows

<60s

Detection-to-case

24/7

Uptime (no analyst)

n8nTheHive 5DFIR-IRISWazuh+2
[+]
AI / Infrastructure

AI Inference Gateway

Local LLM routing with audit trail and cost governance

5+

LLM backends

100%

Inference audited

$0

Tier-1 ops cost

PythonOpenAI-compatible APIOllamaDeepSeek+2
[+]
Infra / Observability

Security Observability Stack

Full-stack observability across the entire SOC pipeline

10+

Custom dashboards

60s

Metrics resolution

100%

Pipeline coverage

GrafanaPrometheusTempoVector+2
[+]