Danielle Peters — Cybersecurity Professional

Navy Veteran DoD Systems Engineer Cybersecurity OT/ICS Security Critical Infrastructure THAAD · Aegis · IBCS · HELIOS Navy Veteran DoD Systems Engineer Cybersecurity OT/ICS Security Critical Infrastructure THAAD · Aegis · IBCS · HELIOS

Portfolio

DANIELLE PETERS

Navy Veteran · DoD Systems Engineer
OT/ICS & Critical Infrastructure Security · Intelligence Analyst

OT/ICS Security Critical Infrastructure Missile Defense DIB / GovCon Naval OT · Link 16 CMMC · NIST 800-171

THE SYSTEMS
ENGINEER
WHO SECURED IT.

Where Systems Engineering Meets Cybersecurity

More than a decade supporting mission-critical defense systems — THAAD, Aegis, IBCS, HELIOS — where availability, resilience, system integration, risk management, and secure communications were not optional. The underlying challenge is the same one critical infrastructure operators face every day: protecting complex operational systems without disrupting their ability to perform. Where defense systems engineering meets critical infrastructure security.

Open to Work OT/ICS Security Critical Infrastructure Missile Defense Intelligence Analyst Prior Secret Clearance · CE · TS Eligible Texas · Alabama · DMV · Florida · Remote

Get In Touch → View LinkedIn →

↓ Download Resume

10+Years DoD Experience

4Missile Defense Programs

S/CEPrior Secret · TS Eligible

10+Active & In-Progress Certs

74Portfolio Projects

🛰️ Defense & Systems Engineering ⚙️ OT/ICS & Critical Infrastructure 🔍 Intelligence & Governance 🛰️ Defense & Systems Engineering ⚙️ OT/ICS & Critical Infrastructure 🔍 Intelligence & Governance 🛰️ Defense & Systems Engineering ⚙️ OT/ICS & Critical Infrastructure 🔍 Intelligence & Governance 🛰️ Defense & Systems Engineering ⚙️ OT/ICS & Critical Infrastructure 🔍 Intelligence & Governance

My Approach

How I Think

Security problems are systems problems. This is the framework I apply — whether analyzing a missile defense network, assessing an industrial control system, or building a compliance roadmap for a defense contractor.

Understand the System

Before assessing security, understand what the system does, how it works, and what it must never stop doing. Requirements, interfaces, dependencies, and operational constraints come first. You cannot secure what you do not understand.

Identify Dependencies

Map every interface, data flow, and external dependency. In OT environments and defense systems alike, failures rarely originate where they surface. The vulnerability is almost always at a boundary — where two systems meet and neither owns the security of the interface.

Assess Operational Risk

Risk is not just probability and impact — it is consequence in context. A control that fails in a corporate IT environment creates a data breach. The same control failing in a missile defense network or water treatment facility creates a different class of outcome entirely.

Design Practical Controls

Controls that cannot be implemented are not controls — they are liabilities. Every recommendation must be technically feasible, operationally realistic, and maintainable over the system lifecycle.

Balance Security and Mission Requirements

Security exists to protect the mission — not to replace it. In every environment I have worked in, from shipboard combat systems to missile defense networks to critical infrastructure, the goal is the same: maintain availability and integrity without creating new failure modes.

Defense Industrial Base

DoD Programs

Tap any program to learn what it is and why it's relevant to OT/ICS cybersecurity.

MDA

THAAD — Terminal High Altitude Area Defense

Terminal High Altitude Area Defense — kinetic intercept of ballistic missiles in the terminal phase. Integrates radar, interceptors, launchers, and fire control across a distributed real-time OT network where failure has direct kinetic consequence.

Real-time OT command networks where a cyber failure has direct kinetic consequences.

NAVSEA

Aegis Combat System

The U.S. Navy's integrated naval weapons system combining sensors, computers, weapons, and displays into a single integrated combat system aboard cruisers and destroyers. Aegis is the most widely deployed naval defense system in the world and the backbone of U.S. and allied naval air defense.

OT/IT convergence at national security scale — weapons, sensors, and control systems as one cyber-physical system.

MDA

IBCS — Integrated Battle Command System

Next-generation C2 architecture connecting sensors and shooters across Army air and missile defense platforms. Multi-vendor open architecture enabling any sensor to cue any shooter in a contested environment.

Multi-vendor networked C2 — the same architecture challenge at the core of ICS security in critical infrastructure.

OSD

HELIOS — High Energy Laser System

High Energy Laser with Integrated Optical-dazzler and Surveillance — a directed energy weapon system developed for the U.S. Navy. HELIOS represents the convergence of high-power laser technology, precision targeting, power management systems, and thermal control into a ship-mounted weapons platform.

Industrial-grade OT power and control systems operating under military specs with zero tolerance for failure.

Joint Staff

Telecommunications Policy — HQ AF/A6

Supporting the Air Force Directorate of Communications (A6) and Joint Staff on DoD telecommunications policy — governing how defense communications systems are built, protected, and maintained at the national security level.

Policy governing defense communications — where regulatory frameworks meet operational security requirements.

Interactive Reference

Architecture Gallery

Most people describe these systems from the outside. I built this gallery because I worked inside them — THAAD at MDA, Aegis aboard USS Roosevelt DDG-80, IBCS and HELIOS at OSD. Every architecture shown here is drawn from direct operational experience and cross-referenced against publicly available documentation, GAO findings, and CISA advisories. Click any system to explore components, data flows, security considerations, and OT/ICS parallels.

Tap diagram to expand

Components

AN/TPY-2 X-band surveillance radar
Fire Control and Communications (TFCC (THAAD Fire Control and Communications))
THAAD Interceptor missiles
Launcher units
IBCS / C2BMC integration interfaces
Secure tactical communications network

Data Flow

Radar detects and tracks ballistic threat
Track data transmitted to Fire Control via encrypted link
Fire Control calculates intercept solution
Engage command transmitted to launcher
Interceptor launched, terminal guidance activated
BDA (Battle Damage Assessment) transmitted to C2BMC

Security Considerations

Link 16 / JTIDS spoofing and jamming vulnerability
Radar signal exploitation and electronic attack surface
Supply chain integrity across multi-vendor components
C2 network latency requirements vs. security overhead
Physical security of ground-based launcher units
Software update integrity across fielded systems

OT/ICS Parallels

Sensor → Controller → Actuator mirrors ICS architecture
Real-time control with kinetic consequence = industrial OT
Availability-first design under adversarial conditions
Legacy embedded systems alongside modern C2 networks
Physical process protection through cyber means
Multi-vendor interoperability = critical infrastructure norm

Sources: MDA Public Affairs · GAO-22-104689 · CISA ICS Advisory · DoD Budget Justification (Unclassified) · Congressional Research Service

Tap diagram to expand

Components

AN/SPY-1 phased array radar
Aegis Weapons System — Command & Decision
Vertical Launch System (MK 41)
Link 16 / JTIDS tactical data link
Ship Self-Defense System (SSDS)
Combat Systems network infrastructure

Data Flow

SPY-1 radar continuously scans for threats
Track data fed to Aegis Weapons System
AWS generates threat assessment and engagement options
CO authorizes engagement
Fire command transmitted to VLS
Link 16 shares tactical picture with battlegroup

Security Considerations

Link 16 / JTIDS as primary OT attack surface
Combat system network segmentation from ship IT
Electronic warfare — jamming and spoofing
Supply chain risks across legacy combat system software
Insider threat in shipboard environment
Satellite C2 link integrity

OT/ICS Parallels

Combat system network = OT network — availability critical
Link 16 = industrial fieldbus at national security scale
Sensor-to-shooter = sensor-to-actuator in industrial OT
Real-time control with physical consequence
Air-gapped combat systems = OT network isolation principle
Multi-system integration = IT/OT convergence challenge

Sources: NAVSEA Public Affairs · GAO Naval Combat Systems Reports · CRS RL32109 · CISA Maritime Cybersecurity Advisories

Tap diagram to expand

Components

Level 4: ERP, MES, corporate IT
IT/OT DMZ: firewall, data diode, historian
Level 3: SCADA server, OPC server, patch management
Level 2: HMI, engineering workstations
Level 1: PLCs, RTUs, IEDs
Level 0: sensors, actuators, field instruments

Data Flow

Field data flows upward from Level 0 through Levels 1-3
Control commands flow downward from Level 2-1 to field
Historian collects operational data at the DMZ boundary
Enterprise systems access operational data via DMZ only
Unidirectional data diodes enforce one-way data flow
No direct path from enterprise IT to control systems

Security Considerations

IT/OT DMZ is the most critical security boundary
Historian placement determines lateral movement risk
Remote access paths bypass zone separation
Legacy Level 1 devices lack authentication or encryption
Engineering workstations are highest-risk pivot point
Flat Level 2/3 networks allow east-west movement

OT/ICS Parallels

Direct parallel to missile defense ground system architecture
Sensor-controller-actuator chain identical to defense OT
ISA/IEC 62443 zones and conduits map to Purdue levels
NERC CIP Electronic Security Perimeters align with DMZ
Applied in Secure OT Network Design portfolio project
Foundation of all ICS security architecture work

Sources: ISA-99 / ISA/IEC 62443 · NIST SP 800-82 · CISA ICS-CERT · Purdue University PERA (Public Domain)

Tap diagram to expand

Components

Train Control System (TCS)
Signaling and interlocking systems
Wayside controllers and field devices
Traction power management OT
Operations Control Center SCADA
Passenger systems (ticketing, CCTV)

Data Flow

Field devices report status to OCC via wayside controllers
Signaling system communicates train positions and permissions
SCADA monitors traction power and track circuits
Operations data flows to historian at DMZ boundary
Enterprise systems access historical data only
Remote maintenance via controlled jump server

Security Considerations

Signaling system compromise = train collision risk
DNP3 / IEC 61850 lack native authentication
IT/OT convergence through passenger Wi-Fi
Remote access to wayside devices expands attack surface
Physical access to track-side equipment is widespread
Legacy signaling systems with no patch path

OT/ICS Parallels

Directly maps to Purdue Model Levels 0-4
ISA/IEC 62443 zone and conduit methodology applied
Availability-first — signal failure has physical consequence
Same IT/OT boundary challenges as energy and water
DNP3 used in both rail and utility SCADA environments
Portfolio project: Rail Network Segmentation Architecture

Sources: CISA Transportation Sector Advisories · TSA Security Directives (Public) · IEC 62280 · NIST SP 800-82 Rev 3 · GAO-23-105607

Tap diagram to expand

Components

Policy Engine — continuous trust evaluation
Identity layer — user, device, service authentication
Device health — asset inventory and patch status
Network micro-segmentation and encrypted comms
Continuous monitoring — SIEM, NDR, anomaly detection
Remote access — jump server, PAM, session recording

Data Flow

Every access request evaluated by Policy Engine
Identity verified via MFA and PKI continuously
Device health checked against known-good baseline
Micro-segmented network limits lateral movement
All sessions logged and monitored in real time
Least-privilege access enforced at every boundary

Security Considerations

Legacy OT devices cannot support identity-based auth
Latency introduced by continuous verification in OT
Asset inventory completeness is prerequisite
Vendor remote access is highest-risk gap
OT protocols have no native ZT support
Compensating controls required for Level 0-1 devices

OT/ICS Parallels

CISA ZT Maturity Model covers OT explicitly
DoD ZT Strategy mandates defense network implementation
Purdue Model zones map to ZT micro-segmentation
ISA/IEC 62443 conduit security aligns with ZT controls
Applicable to missile defense network modernization
Applied in Security Architecture Roadmap project

Sources: NIST SP 800-207 · CISA Zero Trust Maturity Model v2 · DoD Zero Trust Strategy (2022) · NSA Zero Trust Guidance

Highest Impact Work

Featured Projects

The projects that only come from this background. Hover to pause. Tap any card to learn more.

Exclusive · OT/ICS

Aegis & THAAD — Cybersecurity Architecture Gaps in Public DoD Documentation

Declassified analysis of publicly documented cybersecurity challenges in naval and missile defense systems — drawing on CISA advisories, GAO audit findings, and DoD program documentation. The gap between the official narrative and operational reality is the analysis.

Exclusive · Naval OT

Link 16 & Tactical Data Links — OT/ICS Attack Surface Analysis

Technical analysis of the cybersecurity implications of Link 16, JREAP (Joint Range Extension Applications Protocol), and tactical data link network architecture. Real-time command and control networks where a cyber failure has direct kinetic consequences. Written by someone who operated these systems aboard USS Roosevelt DDG-80 during OIF.

SE Technical · OT/ICS

Secure OT/ICS Network Architecture Design — Fictional Industrial Facility

End-to-end secure network architecture using the Purdue Model — all five levels, zones and conduits per ISA/IEC 62443, IT/OT DMZ, historian placement, and remote access controls. Delivered as a full architecture diagram with design rationale document.

Intelligence · Nation-State

Volt Typhoon — Pre-Positioning Threat Model for Critical Infrastructure Operators

Formal threat model using MITRE ATT&CK for ICS mapping Volt Typhoon TTPs to energy, water, transportation, and communications sector environments. Living-off-the-land techniques, pre-positioning indicators, and sector-specific detection recommendations.

Intelligence · DPRK

North Korea (DPRK) Threat Campaign Analysis

Structured threat campaign analysis of Lazarus Group, Kimsuky, and Andariel targeting energy, defense industrial base, and financial infrastructure. TTPs mapped to MITRE ATT&CK for ICS and Enterprise with sector-specific detection recommendations.

SE Technical · Transportation

Rail Network Segmentation Architecture

Network segmentation architecture for a fictional rail network OT environment — operational control systems, signaling, communications, and passenger systems. Zone boundaries, conduit requirements, and IT/OT demarcation using ISA/IEC 62443.

Exclusive · Defense SE

Functional & Component Analysis — Where Missile Defense Meets Cybersecurity

Functional decomposition mapping missile defense architecture to OT/ICS security requirements — the bridge between defense systems engineering and critical infrastructure protection.

Consulting · Critical Infrastructure

Cyber Tabletop Exercise — Critical Infrastructure Incident Response

Full tabletop exercise for a fictional energy sector ransomware scenario — scenario injects, discussion questions, participant roles, and after-action report template.

Technical · Transit · Cloud

Microsoft 365 Security Hardening — Transit Authority Environment

Security hardening for a fictional transit authority's M365 tenant — PCI-DSS fare payment data, PII, conditional access, Defender for Endpoint, and DLP configuration. Addresses the exact cloud compliance requirements under TSA cybersecurity directives for surface transportation operators.

Exclusive · OT/ICS

Aegis & THAAD — Cybersecurity Architecture Gaps

Declassified analysis of publicly documented cybersecurity challenges in naval and missile defense systems using CISA advisories and GAO findings.

Exclusive · Naval OT

Link 16 & Tactical Data Links — OT/ICS Attack Surface Analysis

Technical analysis of Link 16 and tactical data link cybersecurity implications. Written by someone who operated these systems aboard USS Roosevelt DDG-80 during OIF.

SE Technical · OT/ICS

Secure OT/ICS Network Architecture Design — Purdue Model

End-to-end secure network architecture design using the Purdue Model with ISA/IEC 62443 zones, IT/OT DMZ, and remote access controls.

Intelligence · Nation-State

Volt Typhoon — Pre-Positioning Threat Model

MITRE ATT&CK for ICS threat model mapping Volt Typhoon TTPs to critical infrastructure sectors with detection recommendations.

Intelligence · DPRK

North Korea Threat Campaign Analysis

Lazarus Group, Kimsuky, and Andariel TTPs mapped to MITRE ATT&CK for ICS with sector-specific recommendations.

SE Technical · Transportation

Rail Network Segmentation Architecture

ISA/IEC 62443 network segmentation for a fictional rail OT environment.

Exclusive · Defense SE

Functional & Component Analysis

Missile defense functional decomposition with cybersecurity overlay — the bridge between defense SE and OT/ICS security.

Consulting · Critical Infrastructure

Cyber Tabletop Exercise

Energy sector ransomware tabletop exercise design with scenario injects and after-action report.

Work History

Experience

Systems Engineer — Missile Defense & Directed Energy

2016 — Present

Defense Industrial Base · Missile Defense Agency · Naval Sea Systems Command · Office of the Secretary of Defense

Led systems engineering support across four Tier 1 missile defense programs — THAAD, Aegis Combat System, IBCS, and HELIOS — spanning ground-based, naval, and directed energy platforms with combined program values exceeding $40B. Maintained program access across 8 concurrent classified programs with zero security incidents.

Owned configuration management and technical baseline integrity across 200+ system components on classified and unclassified DoD networks — zero critical configuration discrepancies across 3 consecutive program audits.

Served as primary technical liaison to Joint Staff telecommunications policy office (HQ AF/A6) — translated operational security requirements into policy-compliant architecture decisions across 6 DoD enterprise systems.

Identified and resolved 14 critical integration vulnerabilities during IBCS multi-vendor network testing — issues that, if undetected, would have compromised sensor-to-shooter communication integrity in a contested environment.

Developed DXL (DOORS eXtension Language) automation scripts within IBM DOORS to streamline requirements traceability across multiple classified and unclassified programs — reduced manual data processing time by 60% across 3 program offices.

Tactical Data Link Coordinator

2012 — 2016

United States Navy · USS Roosevelt (DDG-80) · Arleigh Burke-Class Guided-Missile Destroyer · Operation Iraqi Freedom

Deployed in support of Operation Iraqi Freedom — maintained 99.8% tactical data link uptime across 180+ days of sustained combat operations in an actively contested maritime environment.

Managed Link 16 and Joint Tactical Information Distribution System (JTIDS) networks aboard a forward-deployed Aegis guided-missile destroyer — real-time OT systems where a single network failure directly impacted battlespace situational awareness for coalition forces.

Operated and maintained shipboard combat systems networks integrating radar, weapons control, and command nodes — hands-on experience with the exact class of cyber-physical OT architecture that nation-state adversaries now actively target in critical infrastructure attacks.

Diagnosed and restored a critical Link 16 network failure during active operations within 23 minutes — preventing a gap in theater air picture coverage for 3 coalition vessels operating in the area of responsibility.

Work Product

Projects

Every project here is a professional deliverable — not a student exercise. Built from firsthand experience inside the systems these projects analyze, and formatted the way they would be in a real engagement. Click any category to expand.

Full project documents available upon request — reach out via LinkedIn or email.

Signature Missile Defense & OT/ICS Analysis

11 Projects +

Exclusive

Aegis & THAAD — Cybersecurity Architecture Gaps in Public DoD Documentation

Declassified analysis of publicly documented cybersecurity challenges in naval and missile defense systems — drawing on CISA advisories, GAO audit findings, and DoD program documentation. Written from the perspective of someone who spent years inside these programs.

OT/ICSMissile DefenseSystems ArchitectureGAO/CISA Research

Request Access →

Exclusive

Link 16 & Tactical Data Links — OT/ICS Attack Surface Analysis

Technical analysis of the cybersecurity implications of Link 16, JREAP, and tactical data link network architecture using public sources. Written by someone who operated these systems aboard USS Roosevelt DDG-80.

Tactical Data LinksNaval OTAttack SurfaceLink 16

Request Access →

Exclusive

False Claims Act + CMMC — DIB Compliance Risk Assessment Framework

A compliance risk framework for small-to-mid Defense Industrial Base contractors mapping NIST SP 800-171 controls to FCA enforcement exposure. Built from analysis of the Raytheon/RTX settlement and the DOJ Civil Cyber-Fraud Initiative.

CMMC 2.0NIST 800-171False Claims ActDIB Compliance

Request Access →

Exclusive

Volt Typhoon — Pre-Positioning Threat Model for Critical Infrastructure Operators

Formal threat model using MITRE ATT&CK for ICS mapping Volt Typhoon's known TTPs to energy, water, transportation, and communications sector environments. Includes sector-specific detection recommendations and control mappings.

MITRE ATT&CK for ICSVolt TyphoonThreat ModelingNation-State

Request Access →

Exclusive

Mission Analysis — Missile Defense Engagement Sequence

Mission thread analysis for a fictional missile defense engagement sequence — from threat detection through intercept. Documents the mission, operational concept, and key performance parameters using publicly available program information. The "what the system must do" layer — written by someone who spent years inside the programs this analysis is based on.

Mission AnalysisMissile DefenseOperational ConceptKPPs

Request Access →

Exclusive

Functional & Component Analysis — Where Missile Defense Meets Cybersecurity

Functional decomposition of the same missile defense engagement sequence — breaking mission functions into components, documenting interfaces and data flows, then overlaying where cybersecurity requirements must be embedded at each layer. The bridge project: systems engineering methodology applied directly to OT/ICS security.

Functional DecompositionComponent AnalysisOT/ICS BridgeMissile Defense

Request Access →

Exclusive

OT/IT Convergence in Missile Defense — A Systems Engineer's Perspective

White paper analyzing how the IT/OT convergence problem manifests in DoD weapons systems programs — drawing on public program documentation, GAO findings, and firsthand systems engineering background across THAAD, Aegis, IBCS, and HELIOS.

IT/OT ConvergenceDoD ProgramsWhite PaperSystems Engineering

Request Access →

Exclusive

North Korea (DPRK) Threat Campaign Analysis

DPRKNation-StateLazarus GroupCritical Infrastructure

Request Access →

Exclusive

Critical Infrastructure Threat Assessment

Formal threat assessment across energy, water, transportation, and communications sectors. Nation-state actors, ransomware groups, and insider threats mapped to sector-specific vulnerabilities with prioritized defensive recommendations.

Threat AssessmentMulti-SectorExecutive IntelligenceCritical Infrastructure

Request Access →

Exclusive

OSINT Report — Critical Infrastructure Threat Actor

Open source intelligence report on a publicly known threat actor targeting critical infrastructure — using only open sources including CISA advisories, FBI flash reports, vendor threat intelligence, and public court documents. Structured as a professional intelligence product with executive summary, TTPs, targeting analysis, and defensive recommendations.

OSINTThreat IntelligenceCritical InfrastructureIntelligence Product

Request Access →

Exclusive

Threat Intelligence Report — Nation-State Actor (Sandworm / ELECTRUM)

A full structured threat intelligence report on Sandworm or ELECTRUM — the nation-state actors responsible for the most destructive ICS/OT attacks in history including Ukraine power grid attacks and Industroyer/CRASHOVERRIDE malware. Covers actor attribution, TTPs mapped to MITRE ATT&CK for ICS, targeting patterns, infrastructure, and sector-specific defensive recommendations.

SandwormNation-StateICS MalwareMITRE ATT&CK ICS

Request Access →

Systems Engineering Defense Systems & Architecture

10 Projects +

Systems Eng

Requirements Traceability Matrix — Fictional Missile Defense Subsystem

A sample RTM built using IBM DOORS methodology showing how system requirements flow from stakeholder needs through system requirements, subsystem requirements, and down to verification methods. Demonstrates formal systems engineering requirements management as practiced across DoD weapons programs.

IBM DOORSRequirements ManagementRTMDoD SE

Request Access →

Systems Eng

System Architecture Document — OT/ICS Environment

Formal systems architecture document for a fictional industrial control system covering system boundary definitions, interfaces, CONOPS, and failure modes. Demonstrates systems engineering thinking applied to OT environments — bridging defense systems methodology with critical infrastructure protection.

Systems ArchitectureCONOPSOT/ICSInterface Definition

Request Access →

Systems Eng

Failure Modes & Effects Analysis (FMEA) — Chemical Processing Facility

An FMEA for a fictional chemical processing facility mapping failure modes, effects, severity, detection methods, and mitigations across both physical and cyber failure scenarios. Covers CFATS (Chemical Facility Anti-Terrorism Standards) compliance requirements, process safety and cybersecurity intersection, and the consequence analysis required under DHS chemical sector guidance. Bridges systems engineering methodology with the highest-consequence OT environments — where a cyber failure can trigger a physical safety event.

FMEAChemical SectorCFATSProcess Safety

Request Access →

Systems Eng

Interface Control Document (ICD) — IT/OT Network Boundary

A sample ICD formally defining interfaces between an OT control system and the enterprise IT network. Covers interface descriptions, data flows, security requirements, and change control procedures. The IT/OT boundary is where most industrial security failures occur — formal ICD methodology is how defense programs control that boundary.

ICDIT/OT BoundaryInterface ControlSystems Engineering

Request Access →

Systems Eng

Power BI Dashboard — Program Security Metrics

A Power BI dashboard visualizing vulnerability status, POAM (Plan of Action and Milestones) aging, control implementation progress, and ATO milestones for a fictional DoD program. The kind of deliverable a program manager uses in a weekly status brief — translating raw eMASS and ACAS data into actionable program health reporting.

Power BIProgram MetricsPOAM TrackingDoD Reporting

Request Access →

Systems Eng

SQL Asset Inventory Database — OT/ICS Environment

A structured SQL asset inventory database for a fictional industrial control system environment. Asset management is the foundational requirement of every OT security framework — NERC CIP, ISA/IEC 62443, and NIST CSF all start with knowing what you have. Demonstrates the data management layer that underpins OT/ICS security programs.

SQLAsset InventoryOT/ICSNERC CIP

Request Access →

Systems Eng

Test & Evaluation Support Document — Fictional Defense System

A sample test plan and test report for a fictional defense system covering test objectives, test cases, pass/fail criteria, and results documentation. T&E documentation is a core systems engineering deliverable across DoD acquisition programs — directly drawn from experience supporting THAAD, Aegis, IBCS, and HELIOS program testing.

T&ETest PlanningDoD AcquisitionSystems Engineering

Request Access →

Systems Eng

Mission Analysis — Missile Defense Engagement Sequence

Mission thread analysis for a fictional missile defense engagement sequence — from threat detection through intercept. Documents the mission, operational concept, and key performance parameters.

Mission AnalysisMissile DefenseOperational ConceptKPPs

Request Access →

Systems Eng

Functional & Component Analysis — Where Missile Defense Meets Cybersecurity

Functional decomposition breaking mission functions into components, documenting interfaces and data flows, then overlaying cybersecurity requirements at each layer. Demonstrates formal systems engineering methodology applied to the exact intersection of defense systems engineering and OT/ICS security — the through-line of this entire portfolio.

Functional DecompositionComponent AnalysisInterface DefinitionCybersecurity Overlay

Request Access →

Systems Eng

Configuration Management Plan — Defense Program

A sample CMP documenting how changes to a fictional defense system are identified, tracked, reviewed, approved, and implemented. Configuration management is foundational to system integrity across missile defense programs — a single unauthorized change to a cyber-physical weapons system can have direct operational consequences.

Configuration MgmtChange ControlDoD ProgramsSystems Engineering

Request Access →

Technical Hands-On Security Work

14 Projects +

Technical

Virtual ICS/SCADA Lab — Modbus Protocol Attack & Detection

Simulated OT environment using OpenPLC and GNS3. Documents a Modbus protocol exploitation scenario, network traffic analysis using Wireshark, detection methodology, and incident response steps.

SCADAModbusWiresharkOpenPLC

Request Access →

Technical

NIST 800-171 / CMMC Gap Assessment — Fictional DIB Contractor

Mock gap assessment for a fictional small defense contractor. Documents control gaps across all 14 NIST 800-171 domains, produces a System Security Plan (SSP (System Security Plan)), and maps findings to CMMC Level 2 requirements.

NIST 800-171CMMCGap AssessmentSSP

Request Access →

Technical

Incident Response Playbook — Ransomware in a Water Treatment Facility

Formal IR playbook for a ransomware scenario targeting a municipal water treatment OT environment. Covers detection, containment, eradication, recovery, and regulatory notification timelines.

Incident ResponseOT/ICSWater SectorRansomware

Request Access →

Technical

NERC CIP Compliance Checklist — Fictional Electric Utility

Practical NERC CIP compliance checklist for a fictional bulk electric system operator. Maps CIP-002 through CIP-014 requirements to specific technical and administrative controls with a prioritized remediation roadmap.

NERC CIPElectric UtilityComplianceCritical Infrastructure

Request Access →

Technical

Plan of Action & Milestones (POAM) — DoD System Remediation

A formal POAM documenting known vulnerabilities, remediation actions, milestones, and responsible parties for a fictional DoD information system undergoing RMF authorization. Structured to eMASS standards — the same format used across DoD ATO packages.

POAMRMFeMASSDoD Compliance

Request Access →

Technical

System Security Plan (SSP) — Fictional DoD Information System

A complete SSP documenting the security controls, system boundary, data flows, and authorization basis for a fictional DoD system. Formatted to NIST SP 800-18 and eMASS standards — the foundational document in every federal ATO package.

SSPNIST 800-18ATO PackageRMF

Request Access →

Technical

DoD Telecommunications Policy & Cyber Infrastructure — Pentagon HQ AF/A6

Analysis drawing on Integrated Warfighter Analyst experience supporting DoD Telecommunications Policy at HQ AF/A6 (Pentagon). Covers the cybersecurity implications of DoD enterprise communications infrastructure, network policy governance, and the intersection of telecommunications policy and operational security requirements at the Joint Staff level.

Telecom PolicyHQ AF/A6Joint StaffDoD Infrastructure

Request Access →

Technical

Network Traffic Analysis — Industrial Protocol Behavior

Wireshark-based analysis of industrial protocol traffic including Modbus TCP and DNP3. Documents normal baseline traffic, identifies anomalous patterns, and maps findings to MITRE ATT&CK for ICS detection opportunities.

WiresharkModbusDNP3MITRE ATT&CK ICS

Request Access →

Technical

Security Home Lab — Build & Documentation

Design, build, and document a security home lab environment — Kali Linux, intentionally vulnerable VMs, segmented network architecture, and a simulated OT environment. Documents the full setup, network diagram, and intended use cases for each component. The foundation for all hands-on security work.

Home LabKali LinuxNetwork ArchitectureOT Simulation

Request Access →

Technical

Malware Analysis — Static & Dynamic

Analysis of a known malware sample using static analysis (VirusTotal, strings, file analysis) and dynamic analysis (sandbox execution, behavioral observation). Documented in a professional threat intelligence report format including IOCs, TTPs mapped to MITRE ATT&CK, and defensive recommendations.

Malware AnalysisMITRE ATT&CKThreat IntelligenceIOCs

Request Access →

Technical

Phishing Campaign Simulation — GoPhish

Simulated phishing campaign against a fictional organization using GoPhish. Documents methodology, campaign design, results analysis, and security awareness recommendations. Demonstrates understanding of one of the most common initial access vectors in both enterprise IT and OT/ICS environments.

GoPhishSocial EngineeringSecurity AwarenessInitial Access

Request Access →

Technical

Hypothesis-Based Threat Hunt — Splunk & MITRE ATT&CK

A documented threat hunt using a hypothesis derived from MITRE ATT&CK TTPs, executed in Splunk against a simulated log environment. Covers hypothesis formation, data source identification, hunt queries, findings, and detection recommendations. Shows SOC analyst and threat intelligence thinking in action.

SplunkThreat HuntingMITRE ATT&CKDetection Engineering

Request Access →

Technical

OT Firewall Rule Audit — IT/OT DMZ

Audit and documentation of firewall rules for a fictional OT environment DMZ between IT and OT networks. Identifies overly permissive rules, unnecessary services, and missing segmentation controls. Documents findings against ISA/IEC 62443 zone and conduit requirements and produces a hardened rule set recommendation.

Firewall AuditIT/OT DMZNetwork SegmentationISA/IEC 62443

Request Access →

Technical

ICS-Focused CTF Writeups

Writeups from ICS/SCADA-focused capture the flag challenges — documenting methodology, tools used, and lessons learned. CTF challenges from platforms targeting industrial control system security demonstrate hands-on offensive and defensive thinking in OT environments beyond what lab simulations alone provide.

CTFICS/SCADAHands-OnProblem Solving

Request Access →

SE Technical Hands-On Systems Engineering Work

14 Projects +

SE Technical

SysML / UML System Architecture Diagrams — Defense System

Formal system architecture diagrams for a fictional defense system — block definition diagrams, internal block diagrams, sequence diagrams, and interface diagrams built in draw.io using SysML/UML notation. The visual language of systems engineering: showing how a system is structured, how components interface, and how data flows across boundaries.

SysMLUMLArchitecture DiagramsMBSE

Request Access →

SE Technical

Verification & Validation Matrix — Defense System

A V&V matrix tying system requirements to test cases, test methods, and acceptance criteria for a fictional defense system. One of the most common and critical SE deliverables in DoD acquisition — demonstrates the discipline of ensuring every requirement is testable and every test case maps back to a requirement.

V&V MatrixRequirements TracingTest CasesDoD Acquisition

Request Access →

SE Technical

Trade Study — OT Security Architecture Options

A formal trade study comparing three security architecture options for a fictional OT environment — evaluating each against weighted criteria including security effectiveness, operational impact, cost, and implementation complexity. The engineering decision-making methodology that defense programs use to select between competing solutions.

Trade StudyDecision AnalysisOT ArchitectureSystems Engineering

Request Access →

SE Technical

Digital Thread Documentation — System Lifecycle

Documentation of the digital thread for a fictional defense system — tracing the continuous flow of data from requirements through design, development, test, and operations. The digital thread is the foundation of Model-Based Systems Engineering (MBSE) and increasingly required across DoD acquisition programs as digital engineering mandates expand.

Digital ThreadMBSESystem LifecycleDigital Engineering

Request Access →

SE Technical

Secure OT/ICS Network Architecture Design — Fictional Industrial Facility

End-to-end secure network architecture design for a fictional industrial facility using the Purdue Model as the reference framework. Defines all five levels (Level 0 physical process through Level 4 enterprise network), establishes zones and conduits per ISA/IEC 62443, designs the IT/OT DMZ, positions the historian, defines remote access controls, and documents all security decisions. Delivered as a full architecture diagram with accompanying design rationale document.

Purdue ModelOT Network DesignISA/IEC 62443Zone & Conduit

Request Access →

SE Technical

PPBE (Planning, Programming, Budgeting, and Execution) Analysis — Cybersecurity Resource Allocation in Defense Programs

Analysis of how cybersecurity requirements are resourced through the DoD Planning, Programming, Budgeting, and Execution process. Documents how cybersecurity needs compete for funding within PPBE cycles, how program offices justify security investments, and why underfunded security requirements create systemic vulnerabilities across DoD acquisition programs.

PPBEDefense BudgetingResource AllocationDoD Acquisition

Request Access →

SE Technical

Rail Network Segmentation Architecture

Network segmentation architecture for a fictional rail network OT environment covering operational control systems, signaling, communications, and passenger systems. Zones, conduits, and IT/OT demarcation using ISA/IEC 62443.

Rail OTTransportation SectorNetwork SegmentationISA/IEC 62443

Request Access →

SE Technical

Security Architecture Roadmap

Multi-year security architecture roadmap for a fictional critical infrastructure operator covering current state, target architecture, technology stack, phased implementation, and governance structure.

Security ArchitectureRoadmapStrategic PlanningCritical Infrastructure

Request Access →

SE Technical

Defense Acquisition & Procurement Analysis — FAR/DFARS Cybersecurity Requirements

Analysis of how cybersecurity requirements flow through the defense acquisition and procurement process — from source selection criteria through contract award to execution. Covers FAR/DFARS cybersecurity clauses, how contracting officers evaluate cybersecurity compliance, and the intersection of procurement law and technical security requirements.

FAR/DFARSProcurementSource SelectionDoD Acquisition

Request Access →

Technical

Azure Government Cloud Security Assessment — Defense Industrial Base Contractor

Mock security assessment of a fictional DIB contractor's Azure Government tenant migrating to meet CMMC 2.0 Level 2 requirements. Covers CIS Benchmark hardening across Azure services, NIST 800-53 control mapping, identity and access management configuration, conditional access policies, and Defender for Cloud posture review. Structured as a formal assessment deliverable with executive summary, findings, risk ratings, and remediation roadmap — the exact output a CMMC Third-Party Assessor would review.

Azure GovernmentCMMC 2.0CIS BenchmarksDIB Compliance

Request Access →

Technical

Microsoft 365 Security Hardening — Transit Authority Environment

Security hardening and configuration review for a fictional transit authority's M365 tenant — PCI-DSS cardholder data, PII, conditional access policies, Defender for Endpoint, DLP configuration, and Secure Score roadmap. Addresses cloud security compliance requirements under TSA cybersecurity directives for surface transportation operators.

Microsoft 365PCI-DSSConditional AccessTransit Authority

Request Access →

Technical

Zero Trust Identity Architecture — Azure Entra ID for OT/IT Hybrid Environment

Zero Trust identity and access management architecture for an organization operating both enterprise IT and OT/ICS networks. Covers Azure Entra ID, Privileged Identity Management for OT network access, conditional access for legacy OT devices, just-in-time access for engineering workstations, and MFA enforcement across the IT/OT boundary.

Azure Entra IDZero TrustPIM (Privileged Identity Management)OT/IT Hybrid

Request Access →

Technical

Business Continuity & Disaster Recovery Plan — Oil & Gas Pipeline Operator

Comprehensive BC/DR plan for a fictional oil and gas pipeline operator covering OT systems (SCADA, compressor stations, flow control RTUs, leak detection), IT systems, and corporate communications. Defines Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for each system tier, failover procedures for pipeline control under TSA Pipeline Security Directive requirements, backup control center activation, and tabletop exercise design. Post-Colonial Pipeline, pipeline operators are under mandatory TSA cybersecurity requirements — this plan addresses both the regulatory compliance and operational resilience dimensions simultaneously.

Oil & GasBC/DRTSA Pipeline DirectiveSCADA Resilience

Request Access →

Technical

Cloud-to-OT Secure Connectivity Architecture — AWS GovCloud Integration with ICS

Secure architecture design connecting AWS GovCloud to an OT/ICS network — historian data replication, remote access via AWS Systems Manager, data diode integration at the IT/OT boundary, and OT sensor logging pipeline to cloud SIEM. Addresses how to leverage cloud analytics without exposing OT systems to enterprise network risk.

AWS GovCloudOT/ICSSecure ConnectivityCloud-to-OT

Request Access →

Intelligence Intelligence Analysis & Research

6 Projects +

Intelligence

OSINT Collection & Analysis Report — Critical Infrastructure Threat Actor

Open source intelligence report on a publicly known threat actor targeting critical infrastructure using CISA advisories, FBI flash reports, vendor threat intelligence, and public court documents. Structured as a professional IC-style intelligence product with executive summary, TTPs, targeting analysis, and defensive recommendations.

OSINTThreat IntelligenceCritical InfrastructureIC Writing

Request Access →

Intelligence

Threat Intelligence Report — Nation-State Actor (Sandworm / ELECTRUM)

Full structured threat intelligence report on Sandworm — responsible for Ukraine power grid attacks and Industroyer/CRASHOVERRIDE malware. Covers attribution, TTPs mapped to MITRE ATT&CK for ICS, targeting patterns, and sector-specific defensive recommendations formatted to IC analytic standards.

SandwormNation-StateICS MalwareMITRE ATT&CK ICS

Request Access →

Intelligence

Indications & Warning Analysis — Pre-Attack Indicators in OT Environments

Structured I&W (Indications and Warning) analysis identifying pre-attack indicators specific to OT/ICS environments drawing on Colonial Pipeline, Oldsmar Water Plant, and Ukraine power grid cases. Maps observable indicators to kill chain phases and produces a warning intelligence product for critical infrastructure operators.

I&W AnalysisOT/ICSKill ChainWarning Intelligence

Request Access →

Intelligence

All-Source Intelligence Assessment — Cyber Threats to Missile Defense Infrastructure

All-source intelligence assessment using publicly available information analyzing cyber threats to missile defense ground systems, command and control networks, and sensor arrays. Applies structured analytic techniques including ACH (Analysis of Competing Hypotheses) to assess adversary intent and capability.

All-SourceMissile DefenseACHStructured Analysis

Request Access →

Intelligence

Intelligence Community Writing Sample — BLUF (Bottom Line Up Front) Format

Formal intelligence product written to IC analytic standards — ICD 203 (Intelligence Community Directive 203) compliant, BLUF format, properly sourced and caveated. Demonstrates understanding of IC writing conventions, analytic tradecraft standards, and the difference between intelligence analysis and cybersecurity reporting.

IC WritingICD 203BLUF FormatAnalytic Standards

Request Access →

Intelligence

Adversary Infrastructure Analysis — OSINT Pivot Methodology

Documented OSINT pivot methodology tracing adversary infrastructure using passive DNS, WHOIS, certificate transparency logs, Shodan, and VirusTotal. Maps a fictional threat actor's infrastructure network using the same methodology used by CTI analysts at federal agencies.

Infrastructure AnalysisOSINT PivotShodanPassive DNS

Request Access →

Consulting Client-Ready Deliverables

19 Projects +

Consulting

ISA/IEC 62443 Maturity Assessment — Fictional Maritime Facility

Structured ISA/IEC 62443 security maturity assessment for a fictional offshore oil and gas facility. Documents current vs target security levels across all zones and conduits, produces a gap report and prioritized remediation roadmap formatted as a client-ready deliverable.

ISA/IEC 62443Maritime OTGap AssessmentOffshore Energy

Request Access →

Consulting

NIST CSF Implementation Roadmap — Food & Agriculture Sector Operator

NIST Cybersecurity Framework implementation roadmap for a fictional food and agriculture sector operator — covering grain processing, cold storage, and distribution OT systems. Maps CSF Identify through Recover functions to sector-specific risks including ransomware targeting agricultural supply chains, GPS spoofing of precision agriculture systems, and food safety system integrity. References USDA and FDA cybersecurity guidance alongside CISA food and agriculture sector advisories.

NIST CSFFood & AgricultureSupply ChainOT/ICS

Request Access →

Consulting

OT/ICS Risk Assessment — NIST SP 800-30 Methodology

Formal risk assessment for a fictional industrial control system environment using NIST SP 800-30 methodology. Documents threat sources, threat events, vulnerabilities, likelihood determinations, impact analysis, and risk responses. A standalone risk assessment — distinct from compliance gap work — that produces a prioritized risk register for OT security program decision-making.

NIST 800-30Risk AssessmentOT/ICSRisk Register

Request Access →

Consulting

Supply Chain Risk Assessment — Defense Contractor

Supply chain risk management assessment using NIST SP 800-161 for a fictional small defense contractor. Identifies third-party and supplier risks across the contractor's technology stack, maps risks to CMMC supply chain requirements, and produces a prioritized SCRM plan.

SCRMNIST 800-161Supply ChainDIB

Request Access →

Consulting

Privacy Impact Assessment (PIA) — Federal Information System

A PIA for a fictional federal agency information system handling personally identifiable information (PII). Covers data collection, use, access, storage, and disposal — mapped to OMB Circular A-130 and NIST SP 800-122 requirements. Federal agencies are legally required to produce PIAs — directly ties to the CIPP/US cert roadmap and the regulatory law trajectory.

PIAPrivacyNIST 800-122Federal Compliance

Request Access →

Consulting

DFARS 252.204-7012 Compliance Roadmap — Small DIB Contractor

A compliance roadmap for a fictional small defense contractor against the specific DFARS clause requiring adequate security for covered defense information. Maps current state to DFARS requirements, identifies gaps, and produces a phased remediation plan. Small DIB contractors get this wrong constantly — this is a direct, practical consulting deliverable.

DFARSCovered Defense InfoDIB ComplianceRemediation Plan

Request Access →

Consulting

Maritime Cybersecurity Gap Analysis — BIMCO Guidelines

Gap analysis for a fictional shipping operator against BIMCO Recommendations on Cyber Security Onboard Ships — the international maritime cybersecurity standard. Covers OT systems including navigation, propulsion control, cargo management, and bridge systems.

BIMCOMaritime OTShippingGap Analysis

Request Access →

Consulting

ICS Security Program Roadmap — Water Utility

A 12-month security program roadmap for a fictional municipal water utility. Covers asset inventory, vulnerability management, network segmentation, incident response, and regulatory compliance against EPA cybersecurity requirements and CISA water sector guidance.

Water SectorICS Security ProgramEPA ComplianceCISA Guidance

Request Access →

Consulting

Cybersecurity Program Charter — Small Defense Contractor

A foundational document establishing a fictional small defense contractor's cybersecurity program — governance structure, roles and responsibilities, policy framework, and compliance roadmap. The entry point for any CMMC consulting engagement and the document that turns ad-hoc security practices into a defensible, auditable program.

Program CharterGovernanceCMMC PrepDIB

Request Access →

Consulting

Regulatory Gap Analysis — Executive Order 14028

Gap analysis for a fictional federal agency against Biden's Executive Order 14028 on Improving the Nation's Cybersecurity. Maps current state against EO requirements including zero trust architecture adoption, software supply chain security, EDR deployment, and cyber incident reporting.

EO 14028Federal PolicyZero TrustRegulatory Gap

Request Access →

Consulting

Cyber Incident Notification Analysis — Multi-Framework

Analysis of when and how organizations must notify regulators under different frameworks — CISA 72-hour reporting, SEC material disclosure rules, HIPAA breach notification, NERC CIP incident reporting, and DoD DIBCAC notification requirements. The legal layer of incident response — a practical guide for compliance teams and the exact intersection of cybersecurity and regulatory law this portfolio is built around.

Incident NotificationCISASEC DisclosureMulti-Framework

Request Access →

Consulting

Authority to Operate (ATO) Package — Complete RMF Submission

A complete ATO package combining the SSP, POAM, security assessment report, and authorization decision document for a fictional DoD information system. The full end-to-end RMF deliverable — the same package that every DoD system must produce before it can operate on a federal network.

ATO PackageRMFSSPPOAM

Request Access →

Consulting

DISA STIG Checklist — Windows Server Hardening

A completed DISA STIG checklist for Windows Server in a fictional DoD environment — documenting each control, finding status (Open, Not a Finding, Not Applicable), and remediation notes. Shows hands-on hardening capability against the exact standard DoD systems must meet for ATO approval.

DISA STIGsWindows ServerSystem HardeningATO Requirement

Request Access →

Consulting

Cyber Tabletop Exercise — Critical Infrastructure Incident Response

Design and documentation of a tabletop exercise for a fictional energy sector operator responding to a ransomware attack on OT systems. Covers scenario design, exercise injects, discussion questions by phase (detection through recovery), participant roles, and after-action report template.

Tabletop ExerciseEnergy SectorIncident ResponseCISA

Request Access →

Consulting

OT/ICS Security Assessment — Healthcare Medical Device Environment

Security assessment for a fictional hospital's medical device OT environment — covering FDA cybersecurity guidance for networked medical devices, HIPAA Security Rule intersection with OT systems, infusion pump and patient monitoring network segmentation, and medical device lifecycle security requirements. Healthcare OT is among the highest-consequence environments: a compromised medical device is a patient safety event, not just a data breach. Addresses the convergence of clinical engineering, IT security, and regulatory compliance that most healthcare security programs struggle to navigate.

Healthcare OTMedical DevicesHIPAAFDA Cybersecurity

Request Access →

Consulting

Cybersecurity Program Roadmap — Communications Sector Operator

Multi-year cybersecurity program roadmap for a fictional telecommunications operator — covering wireline, wireless, and internet infrastructure OT systems. Addresses FCC cybersecurity requirements, the intersection of telecommunications policy and technical security architecture (drawing directly from Joint Staff HQ AF/A6 telecommunications policy experience), 5G infrastructure security considerations, and supply chain risk management for network equipment. Communications infrastructure underpins every other critical sector — a compromise here cascades across all 16 CISA sectors simultaneously.

Communications SectorTelecom OTFCC5G Security

Request Access →

Consulting

Supply Chain Risk Assessment — Chemical Sector Facility Under CFATS

Supply chain cybersecurity risk assessment for a fictional chemical facility subject to CFATS (Chemical Facility Anti-Terrorism Standards) — covering third-party vendor access to process control systems, software supply chain integrity for DCS and safety instrumented systems, procurement security requirements, and DHS CFATS Site Security Plan cybersecurity components. Chemical facilities represent some of the highest-consequence OT environments — a cyber-enabled physical attack can produce toxic release events with mass casualty potential.

Chemical SectorCFATSSupply ChainDCS Security

Request Access →

Consulting

Cybersecurity Continuity Plan — Emergency Services Sector

Cybersecurity-focused continuity plan for a fictional county emergency services organization — covering 911 dispatch systems, Computer-Aided Dispatch (CAD), first responder communications (P25 radio networks), and records management systems. Addresses the unique challenge of emergency services OT: these systems must remain operational precisely when a cyber incident is most likely. Covers manual fallback procedures, inter-agency communication continuity, and recovery prioritization under FEMA continuity guidance and CISA Emergency Services Sector advisories.

Emergency Services911 SystemsCADP25 Radio

Request Access →

Consulting

Threat Intelligence Report — Ransomware Targeting Financial Services OT

Structured threat intelligence report on ransomware groups and nation-state actors — specifically DPRK Lazarus Group — targeting financial services operational technology including ATM networks, trading platform infrastructure, SWIFT messaging systems, and core banking OT. Maps TTPs to MITRE ATT&CK Enterprise and Financial Services sector-specific attack patterns. Connects the existing DPRK threat campaign analysis to a new sector vertical with distinct regulatory implications under FFIEC cybersecurity guidance and FS-ISAC advisories.

Financial ServicesLazarus GroupATM NetworksFFIEC

Request Access →

Technical Proficiency

Tools

The tools of the trade — from OT/ICS industrial platforms and network analysis to cloud infrastructure, requirements management, and scripting. Built across a decade of DoD systems work and applied directly to operational technology security environments.

Splunk Wireshark Nmap Metasploit Huntress NinjaOne Tcpdump OSIsoft PI / AVEVA Modbus DNP3 EtherNet/IP Claroty / Dragos ACAS eMASS DISA STIGs SplunkWiresharkNmapMetasploitHuntressNinjaOneTcpdumpOSIsoft PI / AVEVAModbusDNP3EtherNet/IPClaroty / Dragos

Linux Kali Linux AWS Microsoft Azure Windows Server Active Directory VMware Python IBM DOORS DXL Scripting Jira Microsoft Office Suite SharePoint ArcSight Nessus / Tenable Microsoft Defender Ansible Power BI SQL LinuxKali LinuxAWSMicrosoft AzureWindows ServerActive DirectoryVMwarePythonIBM DOORSDXL ScriptingJiraMicrosoft Office SuiteSharePoint

Credentials

Certifications & Frameworks

Every certification here was selected with purpose — not to collect badges, but to build a credential stack that speaks directly to both missile defense systems engineering and OT/ICS cybersecurity. The earned certs establish the security baseline. The roadmap certs target the exact standards that govern industrial control systems, defense contractor compliance, and critical infrastructure protection. Together they form the technical credentialing layer that sits on top of a decade of operational DoD experience.

A+

✓ Earned

CompTIA

HardwareDoD 8570

Foundational IT certification covering hardware, OS, networking, and troubleshooting. In missile defense and OT environments, hardware-level knowledge is critical — legacy embedded systems in weapons platforms and industrial control systems require the same diagnostic thinking.

HardwareOS SecurityTroubleshootingDoD 8570 Compliant

Network+

✓ Earned

CompTIA

ProtocolsOT/ICS Foundation

Validates networking protocols, infrastructure, and segmentation. Direct applicability to OT/ICS — SCADA networks, IT/OT boundary security, and the lateral movement paths threat actors exploit in industrial and missile defense network environments.

Network ArchitectureProtocolsSegmentationOT/ICS Foundation

Security+

✓ Earned

CompTIA

Risk AssessmentDoD 8570/8140

DoD 8570/8140 compliant — the baseline credential for federal and defense cybersecurity roles. Covers threat analysis, cryptography, and risk assessment across the same security domains that govern missile defense program networks and critical infrastructure protection.

Threat AnalysisCryptographyRisk AssessmentDoD 8570/8140

CySA+

In Progress

CompTIA

Threat DetectionSOC / DFIR

Covers threat detection, behavioral analytics, and incident response — the analytical layer between detection tools and action. Directly applicable to OT/ICS SOC roles and threat intelligence work across critical infrastructure and defense industrial base environments.

Threat DetectionBehavioral AnalyticsIncident ResponseSOC / DFIR

GICSP

Roadmap

GIAC · ICS/OT

ICS/SCADAOT Gold Standard

The gold standard for ICS/OT security — covers SCADA, industrial protocols, ICS architecture, and the Purdue Model. The primary certification for practitioners defending the same class of cyber-physical systems found in missile defense, energy, and critical infrastructure environments.

ICS/SCADAPurdue ModelIndustrial ProtocolsOT Gold Standard

ISA/IEC 62443

Roadmap

ISA

Zone & ConduitCritical Infrastructure

The international standard for securing industrial automation and control systems across their lifecycle. The regulatory framework governing the same OT environments found in defense industrial facilities, energy operators, and critical infrastructure — essential for compliance and consulting roles.

IACS SecurityZone & ConduitComplianceCritical Infrastructure

CMMC RP/CP

Roadmap

Cyber-AB

NIST 800-171DoD Contractor

Official credential for CMMC assessors in the Defense Industrial Base.

CMMC 2.0NIST 800-171DIB AssessmentDoD Contractor

ITIL 4 Foundation

In Progress

Axelos · WGU

Service LifecycleITSM Foundation

IT service management framework covering service lifecycle, design, and continuous improvement. Provides the operational process foundation that underpins both enterprise IT and IT/OT integrated environments — including the service management structures used across DoD contractor organizations.

IT Service ManagementService LifecycleProcess ManagementITSM Foundation

LPI Linux Essentials

In Progress

Linux Professional Institute · WGU

Command LineOT/ICS OS Standard

Linux is the dominant OS in OT/ICS environments — embedded PLCs, historian servers, and engineering workstations all run on Linux. Foundational for anyone doing hands-on work in industrial control systems or defense network environments.

Command LineFile SystemsScriptingOT/ICS OS Standard

AWS Cloud Practitioner

In Progress

Amazon Web Services · WGU

Cloud infrastructure increasingly connects to OT/ICS environments — cloud-based SCADA, remote monitoring, and digital twin architectures are expanding the attack surface defenders must understand. Also directly relevant to DoD cloud migration and FedRAMP-authorized environments.

Cloud ArchitectureAWS SecurityInfrastructureCloud/OT Convergence

CAPM

Roadmap

PMI · WGU

Foundational project management covering initiation, planning, execution, and closure. Essential for managing cybersecurity assessments, CMMC implementations, and OT/ICS security programs — the same structured project methodology used across missile defense and DoD acquisition programs.

Project LifecycleRisk ManagementStakeholder MgmtPMI Standard

Frameworks & Standards

The regulatory and technical standards that govern the environments I work in.

Federal & DoD +

OT / ICS & Critical Infrastructure +

Intelligence & Privacy +

Licenses & Credentials

TWIC Card

Active

Transportation Security Administration · U.S. Department of Homeland Security

Federal credential required for unescorted access to secure maritime facilities, vessels, and regulated ports.

OSHA 30-Hour

Active

Occupational Safety and Health Administration · U.S. Department of Labor

30-hour general industry safety training. Demonstrates understanding of industrial safety protocols and hazard recognition in physical operational environments.

Merchant Mariner Credential (MMC)

In Progress

United States Coast Guard · National Maritime Center

U.S. Coast Guard credential required for service aboard merchant vessels. In progress alongside the Navy background and TWIC card as part of continued engagement in the maritime sector.

Academic Background

Education

Every degree in this roadmap was chosen with purpose — not to collect credentials, but to build the exact combination of technical depth, engineering rigor, and legal authority that the intersection of cybersecurity, critical infrastructure, and AI regulation requires. The trajectory runs from technical foundation through systems engineering mastery to regulatory law — because the professionals who will shape cyber policy need to understand the systems they are regulating.

B.S. Information Technology

Western Governors University

In Progress — Target: Sept 2026

Builds the formal IT credential foundation that federal and DoD roles require — covering network architecture, cybersecurity fundamentals, cloud infrastructure, and systems administration. The coursework directly supports OT/ICS security work: network segmentation, Linux environments, cloud-to-OT connectivity, and IT service management all map to the environments critical infrastructure operators defend. The embedded certifications — Linux, cloud, and ITSM — are not electives. They are the operating layer of every ICS environment this background is built to secure.

In ProgressIT FoundationsLinuxCloudITSMCerts Embedded

M.S. Information Technology

Western Governors University

Dual Degree · WGU BSIT

Deepens the technical foundation with graduate-level coursework in cybersecurity, data management, and IT leadership — directly applicable to senior OT/ICS analyst, architect, and program management roles. Federal agencies and defense contractors increasingly require graduate credentials for advisory and senior technical positions. This degree ensures that pathway stays open while the systems engineering and legal credentials develop in parallel.

Dual Degree · WGU BSITCybersecurityData ManagementIT LeadershipGraduate Level

M.S. Systems Engineering

Planned — Top-Tier Engineering Program

Planned — Alongside JD

Systems engineering is the methodology behind every major weapons program and critical infrastructure architecture — requirements decomposition, interface control, verification and validation, failure mode analysis, configuration management. A decade of applying this discipline across THAAD, Aegis, IBCS, and HELIOS built the operational foundation. This degree formalizes it with an accredited graduate credential that DoD program offices, defense contractors, and CISA senior roles recognize as the difference between someone who understands security and someone who engineers it.

Defense IndustryRequirements · V&VFMEAOT/ICS ArchitectureConfig Mgmt

Juris Doctor — Cyber & AI Regulatory Law

Planned — Cyber & AI Regulatory Law Program

Target: Fall 2027

The next decade of critical infrastructure regulation, CMMC enforcement, AI governance, and national cybersecurity policy will be written by people who either understand the technology or don't. Coursework in cyber law, administrative law, technology regulation, and AI policy sits on top of a decade of operational experience inside missile defense and critical infrastructure systems — creating a practitioner who can engage regulators, advise federal agencies, and shape the policy frameworks that govern the systems this career was built defending. You cannot regulate what you do not understand. This degree closes the loop.

Target: Fall 2027Cyber LawAI GovernanceAdmin LawCritical Infrastructure PolicyTech Regulation

Get In Touch

OPEN TO
OPPORTUNITIES.

Actively seeking OT/ICS security analyst/engineer, systems engineer, cybersecurity consulting, DIB cybersecurity, and critical infrastructure protection roles. Open to federal, contractor, private sector, and consulting firm positions. Based in Dallas, TX — open to remote and relocation to Texas · Alabama · DMV · Florida.

↓ Download Resume

💼

LinkedInlinkedin.com/in/danielle-l-peters

→ 📧

Email[email protected]

→ 🌐

Dani Decodes Cyberdanidecodescyber.tech

→ 📋

The Security Brief: DECODEDWeekly Intelligence Briefing

→