Rachel F. Love

Designed and built a recruiter-facing enterprise security operations MVP that brings asset inventory, vulnerability management, incident response, remediation, control evidence, audit activity, architecture documentation, and responsible AI triage into one cohesive interface.

Problem or objective

Security and technology teams often need a single view that connects operational risk, remediation ownership, control evidence, architecture decisions, and executive reporting without obscuring which controls are actually implemented versus planned.

Role

Solution architect and full-stack project designer responsible for requirements, security architecture, threat modeling, data model, UI/UX, documentation, testing strategy, GitHub publication, and implementation-status governance.

Outcome

A public, documented portfolio application with a professional GitHub repository, real product screenshots, automated CI, 16 passing tests, and explicit implementation-versus-target-architecture disclosures.

A recruiter-facing portfolio lab demonstrating secure Oracle-oriented data engineering across ETL pipelines, PL/SQL and schema design, data governance, performance tuning, replication and resilience, audit evidence, and security controls.

Problem or objective

Enterprise data platforms need reliable ingestion, transformation, governance, performance, resilience, and auditable security controls. These are usually treated as separate concerns, which makes it hard to see how a change in one area affects the others.

Role

Sole designer and full-stack builder responsible for the data-platform model, ETL and governance workflows, Oracle schema and PL/SQL patterns, tuning and resilience content, security and audit evidence design, testing, and public documentation.

Outcome

A public, documented lab that shows secure Oracle-oriented data engineering end to end, with 25 of 25 Vitest tests passing, lint clean apart from pre-existing Fast Refresh warnings, and a successful production build.

A defensive AI assurance portfolio lab for evaluating assistant behavior before release using synthetic probes, transparent deterministic scoring, human-review workflows, threat modeling, audit evidence, and responsible AI governance.

Problem or objective

Teams deploying AI assistants need repeatable, explainable pre-release assurance across instruction robustness, data protection, policy consistency, and tool safety. Without a shared evaluation method, results are anecdotal and cannot be reviewed or repeated.

Role

Sole designer and full-stack builder responsible for the evaluation model, synthetic probe catalogue, deterministic scoring logic, dashboards, human-review workflow, threat model and governance documentation, testing, and public documentation.

Outcome

A public, documented AI assurance lab with domain dashboards, review workflows, and governance documentation, verified at 27 of 27 automated tests passing, lint clean with 0 errors, and a successful production build.

A recruiter-facing defensive security operations portfolio lab demonstrating synthetic incident intake, deterministic priority scoring, SLA management and escalation, guardrailed response automation, human approvals, evidence tracking, audit history, and advisory-only simulated AI triage.

Problem or objective

Security operations teams need incident intake, prioritization, SLA tracking, and response automation that is consistent, explainable, and auditable. Without deterministic scoring and human approval gates, triage decisions vary by analyst and cannot be reviewed after the fact.

Role

Sole designer and full-stack builder responsible for the incident data model, deterministic priority scoring, SLA and escalation logic, guardrailed automation playbooks, approval workflow, evidence and audit design, dashboards, testing, and public documentation.

Outcome

A public, documented security operations lab covering intake, deterministic triage, SLA escalation, guardrailed automation, approvals, and audit evidence, verified at 44 of 44 automated tests passing, typecheck clean with 0 errors, lint clean with 0 errors, a successful production build, and 11 application routes verified.

A defensive applied-cryptography portfolio lab demonstrating cryptographic control selection, key lifecycle governance, encryption and integrity controls, TLS posture, evidence design, and responsible security architecture using synthetic data and browser-local cryptographic demonstrations.

Problem or objective

Enterprise cryptography is not only about choosing strong algorithms. Organizations also need clear ownership, key inventories, rotation and revocation processes, evidence, architecture decisions, and governance that make cryptographic controls reviewable and repeatable.

Role

Sole designer and full-stack builder responsible for the cryptographic control model, key-lifecycle concepts, synthetic governance data, browser-local Web Crypto demonstrations, architecture documentation, risk framing, UI/UX, testing, and public documentation.

Outcome

A public, documented applied-cryptography lab covering control selection, key lifecycle governance, browser-local hashing, HMAC integrity verification, AES-256-GCM authenticated encryption, TLS posture, evidence design, and post-quantum readiness framing, verified with clean typecheck, lint, and production build.

Recruiter-facing solution architecture portfolio demonstrating how business requirements are translated into secure, resilient, governable technical designs through three complete case studies: secure cloud migration, zero-trust enterprise access, and resilient data and application platform design.

Problem or objective

Organizations need architecture decisions that connect business drivers, security boundaries, resilience objectives, operational constraints, costs, and implementation risks rather than diagrams without decision context.

Role

Sole solution architect and full-stack portfolio builder responsible for requirements decomposition, target architecture, trust boundaries, ADRs, tradeoff analysis, risk registers, resilience planning, implementation roadmaps, UI/UX, testing, and public documentation.

Outcome

A public, documented solution architecture portfolio presenting three complete case studies with target architectures, trust boundaries, architecture decision records, tradeoff analysis, synthetic risk registers, and phased implementation roadmaps, verified with automated tests, typecheck, lint, and a clean production build.

Recruiter-facing ethical hacking and attack surface validation lab demonstrating an authorization-first security assessment lifecycle using entirely synthetic data: scope and rules of engagement, attack-surface inventory, validated findings, attack-path reasoning, risk prioritization, remediation, retesting, framework mapping, and executive reporting.

Problem or objective

Ethical hacking is often reduced to vulnerability discovery. This project demonstrates the harder professional work around explicit authorization, evidence quality, business-impact framing, attack-path analysis, remediation ownership, retest discipline, residual risk, and leadership communication.

Role

Sole designer, security analyst, solution-architecture thinker, and full-stack portfolio builder responsible for requirements, synthetic engagement model, scope and rules of engagement, attack-surface model, findings, attack paths, remediation and retest workflow, framework cross-references, UI/UX, testing, documentation, and public release.

Outcome

A public, documented security-assessment portfolio lab with 8 in-scope synthetic assets, 12 validated findings, 3 illustrative attack paths, 9 remediated or closed findings, 9 passed retests, OWASP Top 10, CWE, MITRE ATT&CK, and NIST CSF 2.0 analytical mappings, and an executive-reporting workflow. The app is intentionally non-operational.

Developed reusable AI prompt structures for marketing campaigns, customer personas, social media posts, email sequences, website content, product descriptions, brand messaging, and audience-focused content.

Problem or objective

Marketing teams need generative AI output that is consistent, on-brand, and reusable across campaigns, rather than one-off prompts that produce unpredictable results.

Role

Sole designer of the prompt system: requirements translation, template authoring, structured testing, output evaluation, and documentation.

Outcome

A documented, reusable prompt library with recommended use cases and quality checklists that make marketing AI output repeatable and reviewable.

Translate client goals into website structures, application requirements, user journeys, database needs, content plans, and functional features.

Problem or objective

Clients typically describe business outcomes rather than technical requirements, and need someone who can convert those goals into a buildable, maintainable solution.

Role

Client-facing developer and requirements analyst across discovery, design, implementation, deployment, and maintenance.

Outcome

Repeatable delivery process from discovery through maintenance. Individual client outcomes are not published.

Evaluated AI model outputs for quality, safety, usefulness, consistency, and alignment with task requirements.

Problem or objective

Model outputs must be measured against defined task requirements before they can be trusted, and the review has to be repeatable across reviewers and versions.

Role

AI Specialist performing structured evaluation, dataset preparation, and documentation of findings.

Outcome

Documented evaluations, edge-case records, and refinement recommendations that support consistent model review. Specific project metrics are not published.

Designed a conceptual secure cloud environment that addresses identity, access, networking, application hosting, monitoring, data protection, incident response, and governance.

Problem or objective

A cloud workload needs an identity-first, defense-in-depth design that can be explained to both technical reviewers and non-technical stakeholders.

Role

Architect of the conceptual design and author of the supporting documentation.

Outcome

A documented reference design and diagram that communicates security decisions across identity, network, data, and operations layers.

A sample sanitized solution brief for a fictional government or enterprise customer, demonstrating requirements decomposition, AI-enabled solution design, and proposal-style technical narrative.

Problem or objective

Capture and proposal teams need technical narratives that connect a customer's stated problem to a defensible, security-aware solution approach.

Role

Author of the sample brief: problem framing, requirements decomposition, architecture outline, risk analysis, and executive summary.

Outcome

A reusable brief template that shows how a customer problem becomes a phased, risk-aware, AI-enabled solution.

A documented incident-response workflow covering identification through lessons learned and security-control improvement.

Problem or objective

Response activity has to be ordered, evidence-preserving, and documented so that improvements can be made after the incident closes.

Role

Author of the workflow and supporting documentation.

Outcome

A clear, teachable response sequence suitable for tabletop use and documentation practice.