Skip to content
View MegaZegan's full-sized avatar

Block or report MegaZegan

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
MegaZegan/README.md

MegaZegan

Cybersecurity-focused developer building practical defensive tools for SOC workflows, cloud security reviews, and secure development pipelines.

I like tools that are safe to demo, easy to explain, and useful when an alert has decided to ruin everyone's afternoon.

Python Security CI Portfolio

What I Build

Area What I care about
SOC automation Turning noisy logs into clear findings before coffee goes cold.
Detection engineering Practical rules, explainable risk scoring, and fewer mystery alerts.
Cloud security IAM policy review, least-privilege checks, and readable remediation.
DevSecOps Secret scanning, SARIF output, CI-friendly guardrails, and boringly useful reports.
Frontend experiments Retro interfaces, responsive UI polish, and a tiny bit of theatrical lighting.

Featured Security Projects

Project What it does Best part
VaultWatch-Terminal Fallout/Pip-Boy inspired local telemetry triage for JSONL, JSON, and CSV logs. Security dashboard energy without touching real production data.
TraceLens CLI for suspicious authentication, firewall, DNS, and outbound traffic patterns. Finds patterns that make analysts say "wait, scroll back up."
SentinelForge SOC analytics toolkit with normalization, detections, risk scoring, and HTML reports. A report generator that tries very hard to be useful on purpose.
CloudPolicyLens IAM-style cloud policy linter for risky permissions and weak guardrails. Points at dangerous wildcards with the calm confidence of a lint tool.
SecretHawk Local defensive secret scanner with masked findings, entropy checks, and SARIF output. Keeps secrets secret, which is refreshingly on brand.

Creative & Coding Projects

Project What it shows
PipBoy-3000-Interface A retro Fallout-inspired interface with inventory, map, radio, status panels, themes, animation, responsive UI, and GitHub Pages deployment.
AlgoKit-Lite Python fundamentals: sorting, searching, graph shortest path, LRU cache, text utilities, CLI demos, tests, and clean packaging habits.
PixelForge-Studio Canvas pixel editor with drawing tools, flood fill, frame preview, local saves, PNG export, and a live GitHub Pages app.
BeatGrid-Lab Web Audio drum sequencer with synthesized percussion, timing controls, mixer UI, local saves, and canvas visualization.

Toolkit

Python pytest GitHub Actions CLI tools JSON/CSV log processing IAM policy analysis SARIF HTML CSS JavaScript responsive UI defensive security automation

Current Direction

I am building a cybersecurity portfolio around practical blue-team engineering: tools that can be explained in an interview, tested in CI, and run locally without causing a compliance department to materialize out of thin air.

Quick Links

Pinned Loading

  1. CloudPolicyLens CloudPolicyLens Public

    IAM-style cloud policy linter for risky permissions, public principals, and weak security guardrails.

    Python

  2. SecretHawk SecretHawk Public

    Local defensive secret scanner with masked findings, entropy checks, allowlist comments, and SARIF output.

    Python

  3. SentinelForge SentinelForge Public

    Defensive SOC analytics toolkit for log normalization, detection rules, risk scoring, and HTML reports.

    Python

  4. PipBoy-3000-Interface PipBoy-3000-Interface Public

    Interactive Fallout-inspired Pip-Boy 3000 web interface with retro terminal UI, themes, inventory, map, and radio panels.

    HTML

  5. VaultWatch-Terminal VaultWatch-Terminal Public

    Retro vault-terminal defensive security triage for local logs.

    Python