JD
Contact
Portfolio / Cybersecurity Lab

> security_researcher --status active

Securing systems.
Breaking assumptions.

Computer Science graduate from Manhattan University with a focus on cybersecurity, network defense, and secure application development. Trilingual professional protecting critical infrastructure.

jd@kali:~$
$ _
View Projects Explore Arsenal

// about

Security Mindset

Network Defense

Proficient in network monitoring with Wireshark, firewall configuration, and intrusion detection systems. Understanding how traffic flows to identify and stop threats before they escalate.

Authentication & Access Control

Built production OAuth 2.0 authentication systems with MFA, Firebase integration, and secure session management. Protecting user identity at every entry point.

Operating System Security

Deep understanding of Linux kernel security, OS hardening, and administration. Experienced with Seed Labs for hands-on exploitation and defense exercises.

Secure Development

Writing secure code from the start — input validation, encrypted communications, and defense-in-depth principles applied across Python, JavaScript, and C++ applications.

"Security isn't just about building walls — it's about understanding how they're breached and making them stronger every time."

// arsenal

Security Toolkit

Languages

Python JavaScript TypeScript C++ SQL Bash Java HTML/CSS

Security & Networking

Suricata (IDS) Scapy Wireshark Nmap TLS/Cookie Auditing OAuth 2.0 / MFA SEED Labs (TCP/IP, PKI)

ML / AI

Qdrant Pinecone (Vector DB) HuggingFace RAG LangChain Prompt Engineering Semantic Search Lightning.ai

Infrastructure & Tools

Docker ServiceNow osTicket Linux (Ubuntu ARM64) MacOS Node.js / Express Firebase Vercel Git / GitHub / GitLab Azure DevOps REST APIs

// projects

Security & IT Operations Projects

Personal Project • 2026

Mini SOC Detection Pipeline

End-to-end network intrusion detection and automated incident ticketing pipeline deployed on a self-managed Ubuntu Server (ARM64) VM.

  • Built pipeline: Scapy-crafted traffic → Suricata IDS alerts (eve.json) → Python parser → automated osTicket creation
  • Applied AI-native workflows to iterate on REST APIs and internal security tooling with full Git-based testing
  • Configured and deployed on Ubuntu Server VM, resolving ARM64/Apple Silicon virtualization constraints
Suricata Scapy Python osTicket API Ubuntu ARM64
SECURITY LEVEL
CRITICAL
Personal Project • 2026

Web Application Vulnerability Scanner

Live web security scanner and AI-assisted URL risk-assessment architecture for auditing headers, TLS posture, cookies, and phishing threats.

  • Audits live websites for missing security headers, weak TLS configurations, and insecure cookie flags
  • Combines Google Safe Browsing, VirusTotal, and PhishTank with an LLM secondary layer for phishing/brand-impersonation detection
  • Integrated LLMs, RAG workflows, and external threat intelligence APIs into scalable application components
Python TLS Auditing VirusTotal LLM / RAG
SECURITY LEVEL
HIGH
Personal Project • 2026

Self-Healing Endpoint Dashboard

Real-time endpoint monitoring terminal dashboard that detects anomalous CPU/resource usage processes and auto-generates throttled support tickets.

  • Real-time process telemetry and automated incident ticket generation in Python
  • Implemented 30-second cooldown throttling per category to prevent alert flooding and mirror SOC noise-reduction practices
  • Built continuously updating terminal UI using rich's Live display
Python psutil rich ITSM Automation
SECURITY LEVEL
HIGH
Personal Project • 2026

osTicket ITSM Deployment (Docker)

Containerized, reproducible ITSM ticketing infrastructure engineered with a custom Dockerfile and hardened MySQL 8 backend.

  • Deployed self-hosted osTicket ITSM instance after resolving MySQL 8 authentication and upstream dependency issues
  • Debugged container build failures end-to-end (broken base image, libicu-dev dependency) for a stable ticketing lab
Docker PHP MySQL 8 Apache Linux
SECURITY LEVEL
ELEVATED
CMPT 369 — Cybersecurity Lab

Google OAuth 2.0 Authentication Service

Engineered a standalone OAuth 2.0 verification API with multi-factor authentication and session security — hardening user account protection from the ground up.

  • Built OAuth 2.0 verification API using Express.js and google-auth-library
  • Integrated Firebase Authentication for MFA step verification
  • Configured secure routing redirects, session serialization, and backend auth checks
  • Protected dashboard endpoints with layered security controls
Node.js Express Google Auth Firebase Passport.js
SECURITY LEVEL
HIGH
CMPT 490 — Capstone

Turkey.app — Secure Image Platform

Full-stack web application for secure image storage, organization, and semantic search — with user authentication, access control, and storage capacity management.

  • Agile/Scrum development in a 4-member team at Manhattan University
  • Implemented backend auth, storage capacity management, and image import/export
  • Semantic search powered by Qdrant vector database
  • Sprint planning, feature delivery, and backlog management
Python SQLite Qdrant Lightning.ai
SECURITY LEVEL
MODERATE

// lab_exercises

Hands-on Security Labs

> SEED LAB 01

Wireshark Packet Analysis

Monitored and captured live network traffic to analyze packet structures, identify suspicious communication patterns, trace UDP/TCP streams, and inspect protocol headers.

> SEED LAB 02

Software Vulnerability Exploits

Executed buffer overflow attacks inside isolated Linux environments to overwrite stack variables, alter program execution control flow, and execute arbitrary root-level shellcode.

> SEED LAB 03

Web Authentication Exploitation

Leveraged injection techniques like SQL injection to bypass application login logic and retrieve sensitive DB rows, and Cross-Site Scripting (XSS) to capture user session tokens.

> SEED LAB 04

OS Hardening & Access Audits

Investigated privilege escalation vulnerabilities, analyzed Set-UID programs to understand boundary-crossing safety, and audited system configurations to mitigate host exploitation.

// certifications

Credentials & Training

Cybersecurity Upskilling & Frameworks

LinkedIn Learning

Mar 2025

Securing Cryptocurrencies

LinkedIn Learning

Apr 2025

Operating Systems: Overview, Admin & Security

IBM

Nov 2022

Cybersecurity Roles, Processes & OS Security

Coursera

Nov 2022

Product Management Job Simulation

Electronic Arts (Forage)

Apr 2026

Personal Banker Job Simulation

Wells Fargo (Forage)

Apr 2026

// coursework

Relevant Studies

CMPT 369

Cybersecurity Lab

Hands-on security exercises: penetration testing, vulnerability analysis, authentication systems, and network defense.

CMPT 456

Software Engineering

Secure software development lifecycle, Agile methodologies, OAuth implementation, and team-based project delivery.

CMPT

Computer Security

Cryptography, access control models, malware analysis, and security protocols for modern computing environments.

CMPT

Operating Systems

Process management, memory protection, kernel security, file system permissions, and OS-level hardening techniques.

CMPT

Data Structures & Algorithms

Efficient data handling, algorithmic complexity, and optimization — foundational to writing secure and performant code.

// contact

Let's Connect

Joseph Decossard

Computer Science • Manhattan University '26

English · French · Creole (Trilingual)

jedecossard@gmail.com LinkedIn GitHub (Personal) GitHub (School)
View Resume Download Resume
Return to Main Portfolio