Open to cyber security opportunities
Cyber Security Analyst · Sydney, Australia
I help teams find and fix security weaknesses before they become incidents. Network and endpoint analysis, detection engineering and vulnerability triage, backed by clear reporting that gets remediation moving.
About
I'm a cyber security analyst in Sydney with a Bachelor of Cybersecurity (Distinction) from Macquarie University. Today I work in a technical support and analysis role at 3D Safety Systems, where I identify and triage security vulnerabilities across web and mobile applications, investigate incidents and risks through to root cause, and administer access and configuration across a production platform that construction sites rely on every day.
Along the way I've monitored Microsoft Defender alerts, tightened Google Workspace identity and access, set up DMARC and DKIM, hardened a customer-facing website and CRM, and run phishing simulations that fed straight into awareness training. Before that I spent a year assessing the Wi‑Fi privacy of a live university campus, capturing more than 80,000 802.11 frames and showing how everyday devices leak enough to be tracked.
What ties it together is a habit of turning technical findings into decisions people can act on. Whether it's an executive who needs a risk rating or a site manager who needs their access fixed before the morning toolbox talk, I care about being clear, accurate and easy to work with. I speak English and Greek, and I'm currently building a SIEM from scratch to understand detection from the inside.
What I do
Six things I do well, proven across a live network assessment, a production support function and self-directed lab work.
Capturing and analysing network traffic and endpoint telemetry to spot anomalous activity, privacy leakage and exploitable weaknesses, then building detection logic that maps observed behaviour to MITRE ATT&CK techniques.
Assessing control coverage against the ASD Essential Eight and CIS Critical Security Controls, rating likelihood and impact, and turning framework requirements into policy, standards and remediation roadmaps that owners can actually action.
Triaging, investigating and resolving defects, incidents and risks in a live production environment, with disciplined handling of sensitive data and accurate, auditable documentation at every step.
Python and PowerShell scripts for log collection, parsing security events and querying large datasets for indicators of compromise, plus isolated virtual labs across Windows, Linux and macOS for controlled testing.
Formal assessment reports, dashboards and presentations that give leadership visibility and support risk-informed decisions, alongside front-line experience explaining policy to people who don't speak security.
Comfortable picking up unfamiliar tooling, adjusting as scope and priorities shift, and coordinating vendors, internal teams and external stakeholders until the outcome is delivered.
Experience
From a live campus network assessment to a production platform used across construction sites.
Construction safety technology · Sydney
3D Safety Systems builds site induction, compliance and workforce management software for construction. I identify, triage and document security vulnerabilities and defects across its web and mobile apps, act as the escalation point for incidents and risks, and administer access and configuration for incoming projects, with sensitive workforce data handled to a regulated standard.
Consumer goods · fitness supplements
Hands-on security for a growing consumer brand: monitoring Microsoft Defender detections across endpoints, tightening Google Workspace identity and access, authenticating outbound mail with DMARC and DKIM, hardening the website and CRM, and running phishing simulations that fed targeted awareness training.
PACE industry internship · School of Computing
An end-to-end Wi‑Fi security assessment of the live campus network, from scoping the engagement with the project sponsor to a formal technical report and stakeholder presentation. The full write-up is in the case studies below.
Retail & events
Where I learned to explain things clearly to people who don't care about the technical detail. Built customer and stakeholder relationships that drove repeat business, secured product placement in Chemist Warehouse, and sold out pop-up inventory at the Australian Fitness Expo in Sydney and Wollongong.
Case studies
Two pieces of work that show how I think: a live network assessment and a SIEM built from scratch.
Case study 01 · 2024
Wi‑Fi devices are chatty. When a phone looks for networks it has joined before it can broadcast their names, and if its hardware address never changes, anyone listening can follow it around. I was asked to find out how much of that was happening on a live university campus, and what to do about it.
Working from Kali Linux on a Raspberry Pi with Wireshark, Kismet, Aircrack-ng and Bettercap, I captured over 80,000 IEEE 802.11 frames and pulled apart the probe requests. Using the WiGLE API I geolocated the SSIDs devices were broadcasting, showing how a leaked network name can place a person at a home, a workplace or a gym. Roughly one in six devices observed was not randomising its MAC address at all.
Each finding was rated for likelihood and impact and mapped to the ASD Essential Eight, CIS Critical Security Controls and MITRE ATT&CK. The engagement closed with a formal technical report, a presentation to the project sponsor and a prioritised roadmap: enforced MAC address randomisation, SSID broadcast hygiene and targeted user awareness.
Capture summary Kali Linux · Raspberry Pi
1 in 6 observed devices (16.6%) were not randomising their MAC address.
Case study 02 · 2026
The best way to understand a SIEM is to build one. Ria's SIEM is a small but complete pipeline: a Windows agent that collects Security, System and Application event logs, a Flask API that ingests and indexes them into SQLite, and a web dashboard for querying and visualising what comes in.
The query layer supports filtering and full-text search across source host, Event ID, log type, severity and time range, which is enough to work real detection use cases: failed logon activity, new process creation and service installation.
I also documented what it would take to trust it in production, because a proof of concept that pretends to be finished is a liability. There is no authentication, no TLS, no input validation hardening, no rate limiting and no log integrity verification, and the README spells out exactly which controls close those gaps.
Architecture Agent → API → store → dashboard
Projects
Pulled live from github.com/ria-kara. Every card links straight to the source.
Connecting to GitHub…
Ria's SIEM is a lightweight Python-based Security Information and Event Management (SIEM) proof of concept that collects Windows Event Logs, stores them in a central database, and provides a web dashboard for querying and visualising security events. Built for educational purposes to demonstrate core SIEM concepts and log monitoring.
Skills
Grouped the way they show up in a working day: what I analyse with, what I measure against, and what I build with.
Security tools
Frameworks
Programming & scripting
Platforms & systems
Collaboration
Education
2022 – 2025
Macquarie University, Sydney
Graduated with Distinction. Included a PACE industry internship delivering a live Wi‑Fi security assessment for the university's own campus network.
Distinction2021
Ryde Secondary College
ATAR of 98.5, placing in the top two percent of the state.
ATAR 98.5Contact
Hiring for a security analyst, want a second pair of eyes on a problem, or just keen to talk detection and Wi‑Fi privacy? My inbox is open.
Based in Sydney, Australia · open to cyber security roles