DUBLIN, IE
3 / 9 months
Security operations
Phishing triage, access reviews, OSINT investigations and crisis-exercise support on the live cyber queue.
Romy Peter
SECURITY OPS, BUSINESS CONTINUITY, RISK & COMPLIANCE, OT SECURITY
Cybersecurity graduate at Iarnród Éireann (Irish Rail), working across security operations and business continuity for critical national infrastructure.
MEng, First Class Honours
Cyber Security, University of Limerick
CompTIA A+
certified, Plus series
INE eJPT
certified, Junior Penetration Tester
Cyber Europe 2026
ENISA/NCSC exercise, scribe and reporting
SECURITY OPS, BUSINESS CONTINUITY, RISK & COMPLIANCE, OT SECURITY, CRITICAL INFRASTRUCTURE
01Who I am
About
I'm a cybersecurity graduate at Iarnród Éireann (Irish Rail), a national transport operator and critical-infrastructure provider, working across security operations and business continuity, with risk and compliance and OT security rotations still ahead.
What I do best is take ownership and carry a problem all the way through. Give me an ambiguous brief, or something that has stalled without a clear template, and I will scope it properly and bring it to a finished, well-documented outcome that stands up to an audit. I like moving between the hands-on and the governance sides of security, and doing whatever the task in front of me actually calls for.
I finished my MEng in Cyber Security at the University of Limerick with First Class Honours, going deep into cryptography, secure networks, data forensics and biometrics, and before that completed a BTech in Computer Science at IIIT Sri City. I hold CompTIA A+ and INE eJPT, and I'm steadily working toward more.
I also build things. My projects tend to be small, working tools rather than demos, and most are deployed and open source. What I care about is helping build digital infrastructure that stays secure and keeps working, especially in sectors where trust, safety and uptime really matter.
Hand me the vague, stalled problem and I will give back something finished and documented.
02Where I work
Experience
Cybersecurity Graduate
Iarnród Éireann (Irish Rail)
Oct 2025 - Present
Dublin, Ireland
Full-time
Cybersecurity graduate on a rotational programme (security operations, business continuity, governance, risk & compliance, and operational technology security) for a national railway operator and critical-infrastructure provider.
- Triaged the central cyber mailbox and handled phishing and account-compromise cases using Microsoft Defender (analysis, containment, IOC extraction).
- Scribed and authored SitReps, executive summaries and post-incident reports for major-incident bridges and cyber crisis exercises, including ENISA/NCSC Cyber Europe 2026.
- Owned high-volume access-review queues in ServiceNow (170+ USB/removable-media reviews, plus external and overseas reviews from Active Directory), enforcing least privilege.
- Ran proactive threat hunting and OSINT investigations into public-domain data exposure (including a CVSS 6.5 finding), and supported penetration-test coordination and vulnerability research.
- Assessed Microsoft 365 Copilot data-exposure risk ahead of rollout and set out Microsoft Purview (DLP, sensitivity labels) and Entra ID access-review controls.
- Authored security policy and incident-response playbooks (NIST 800-61r2, NIS2, GDPR), including an evidence-based external-access policy.
- Completed software security reviews and GDPR DPIAs, adopted as the team's benchmark template.
- Developed and maintained BIAs and BCPs across ICT (RTO/RPO/MTD/MBCO) and managed the release and secure distribution of the BC plan suite.
- Coordinated disaster-recovery tests and tabletop exercises end to end and helped formalise the DR-testing process.
- Led the procurement and onboarding of an out-of-band Google Workspace business-continuity platform end to end (a five-figure investment), and built bulk-SMS alerting and process automation.
The rotation
36-month programme, about 9 months a stream
Current
Business continuity
Impact analyses, recovery planning and a disaster-recovery test coordinated end to end across ICT.
Upcoming
Risk & compliance
Security policy, DPIAs and evidence-based reviews aligned to NIST, NIS2 and GDPR.
Upcoming
OT security
Operational technology security for the systems that keep the trains moving.
IT & Security Support
Freelance
Jul 2023 - Jun 2024
Muscat, Oman
Muscat, OmanSelf-employed
- Built a small business's online presence end to end: domain, a multi-page website and hosting, business email, and basic protection (web application firewall and third-party DDoS protection) on a hardened security baseline.
- Refurbished and set up end-user computers, imaging machines over network boot, installing and updating operating systems and software, and tuning older hardware for reliability.
- Hardened small-office networks by updating router firmware, setting strong credentials, applying QoS, turning off insecure features such as WPS, and monitoring connected devices.
- Applied security basics across client systems: patching, system hardening, least-privilege account separation, monitoring for unauthorised access, and simple data backup and redundancy.
- Diagnosed and resolved hardware, software and network issues for clients, minimising downtime and keeping day-to-day operations running.
03Build log
Selected work
Small, working tools rather than demos; most are deployed and open source.
RailSecure
AI + RAIL SECURITYA rail-focused cyber readiness platform
Phishing training, incident drills, playbook generation, compliance Q&A, a live CVE feed and awareness content in one workspace. Built on schema-constrained AI workflows rather than a free-form chatbot, with server-side prompt-injection guardrails and rate limiting.
railsecure.vercel.app
- Task-specific AI workflows with structured outputs, not one generic chatbot
- Live vulnerability review against the NVD CVE API
- Awareness content built around real rail and transport incidents
- Next.js
- React
- TypeScript
- Claude API
- NVD CVE API
Firewall Logging & Automated Incident Response
NETWORK DEFENCEAn automated network-defence system
Detects threats and responds without a human in the loop: a hybrid IDS (rule-based plus a CNN for flow anomalies) feeds a playbook-driven engine that scores each event and either blocks the source via nftables or redirects it to a honeypot, with MITRE-mapped playbooks, a live dashboard and an LLM assistant.
github.com/rsvptr/firewall-logging-incident-response
- Validated in a four-VM lab against thousands of attack events
- Sub-second to low-second detection and containment
- Block or honeypot-redirect chosen per event by a scoring engine
- Python
- TensorFlow
- Scapy
- Flask
- nftables
- SQLite
CrypticComm
APPLIED CRYPTOGRAPHYA browser-based RSA workspace
Public-key crypto end to end: key generation, OAEP and textbook encryption, RSA-PSS signing and verification, an AES-GCM encrypted wallet, and WebRTC peer chat. Everything runs locally through the Web Crypto API and keys never leave the browser. A teaching tool, not an audited product.
crypticcomm.vercel.app
- Textbook RSA included on purpose, so you can watch OAEP fix it
- Encrypted key wallet with import and export
- Peer chat where each bubble can show its own ciphertext
- Next.js
- React
- TypeScript
- Web Crypto API
- PeerJS
Earlier work
factguard.streamlit.app
FactGuard
ML / NLPFake-news classification by writing style
Judges writing style, not topic (function-word TF-IDF plus Random Forest). An early model hit 0.95 but overfit to one outlet's house style; a stopword-only vocabulary and a second source gave a final model at 0.97 that held up on unseen articles.
Python, scikit-learn, NLTK, Streamlit
deb-eight.streamlit.app
Deb8
ML / NLPClickbait-headline detection
Classifies headline phrasing with a TF-IDF profile, four hand-built signals and Multinomial Naive Bayes. Built by a team of four, including scraping around 20,000 fresh headlines to reach a 52,000-headline dataset and roughly 0.93 test accuracy.
Python, scikit-learn, NLTK, pandas
04Capabilities
Technical skills
Practices first, then the tools and frameworks behind them, grouped the way the work actually splits.
- Incident response
- Phishing analysis
- Threat hunting
- OSINT
- SIEM
- Vulnerability management
- Penetration-test coordination
- Microsoft 365 Defender
- ServiceNow
- Qualys
- SOCRadar
- UpGuard
- Microsoft Entra ID
- Active Directory
- MFA and Conditional Access
- LAPS
- Access reviews
- Least privilege
- Microsoft 365
- Google Workspace
- Cloud security
- Microsoft Purview (DLP, sensitivity labels, data classification)
- DNS and email security (SPF/DKIM/DMARC/MX)
- Security policy development
- Risk assessment
- GDPR and DPIA (Article 35)
- Third-party risk management
- ITIL
- NIST CSF 2.0
- NIST SP 800-61r2
- ISO/IEC 27001
- ISO 22301
- NIS2
- CER
- MITRE ATT&CK
- CIS Controls
- NCSC/CSIRT reporting
- ENISA exercise framework
- Business impact analysis
- Business continuity planning
- Disaster-recovery testing
- Recovery metrics (MTD/MBCO/RTO/RPO)
- Crisis communications
- Python
- Network security
- IDS/IPS
- Cryptography
- Application security
- AI security
- Security awareness training
- Prompt engineering and adversarial testing
- Claude Code
- LLMs
- Technical writing
- Stakeholder management
- Microsoft Power Automate
- Power Apps
- SharePoint
- Microsoft 365 Copilot
- Jira
- Confluence
- Excel
- Visio
- Lucidchart
- PlantUML
Frameworks and standards
- NIST CSF 2.0
- NIST SP 800-61r2
- ISO/IEC 27001
- ISO 22301
- NIS2
- CER
- MITRE ATT&CK
- CIS Controls
- GDPR
- ENISA exercise framework
- NCSC/CSIRT reporting
- ITIL
05Credentials
Certifications
CompTIA A+
CompTIA
Issued Nov 2024 · Expires Nov 2027
Credential ID KV2Q8RCYYFREQP3E (opens in new tab)INE eJPT
INE (Junior Penetration Tester)
Issued Nov 2023 · Expires Nov 2026
Credential ID 88259711 (opens in new tab)In progress: CompTIA Network+ and Security+
06Academic
Education
University of Limerick
Master of Engineering in Cyber Security
90 ECTS spanning cryptography, security and communication protocols, network and host security, data forensics and biometrics. Thesis: Firewall Logging & Automated Incident Response.
Programme page (opens in new tab)First Class Honours (1.1)
Sep 2024 - Aug 2025
Limerick, Ireland
Indian Institute of Information Technology, Sri City
Bachelor of Technology in Computer Science & Engineering
Core CS foundations with a full-stack development track and electives in machine learning, data science and cyber security.
Programme page (opens in new tab)GPA 8.04/10
Aug 2019 - Jun 2023
Andhra Pradesh, India
07Off the clock
Beyond work
Volunteering
UL Global Student Ambassador
University of Limerick, Sep 2024 - May 2025
Created content for UL Global's social channels across two semesters (blogs, photos, videos and graphics), and represented UL at webinars, orientations and campus visits with event coverage and videography. Answered prospective and current international students' questions by email and social media, sharing first-hand experience to help them settle in. Contributed volunteer hours toward the UL President's Volunteer Award and received a Certificate of Completion and a programme reference from UL Global.
Languages
English, full professional proficiency (IELTS 8.0, CEFR C1)
Interests
- Photography
- Audiophile Equipment
- Graphic Design
- Video Production
- Classic Cinema
- Retro Gaming
08Try it live
Console
You found the bottom. Here is a real terminal, not a mock, wired to the same data as the rest of this page.
romy@romy2k: ~
type help
Every command reads from the same data as the rest of this page; start with help or go straight to experience --full.