Fifteen years spent enforcing the rules in public procurement taught me something useful: whoever truly understands a compliance system knows exactly where the cracks are. I'm now using that leverage — GRC, ISC² CC certification, AI governance — to break into a technical world that didn't train me from scratch, with a declared destination: offensive security. I want to find vulnerabilities and attack systems for a living, not just write checklists on how to avoid them.
This repo is the diary of that transition. Not everything here is impressive — some of it is clearly beginner-level. I'm leaving it visible on purpose to document my journey.
🎯 Where I'm heading: Red Teaming / Offensive Security
🪜 How I'm getting there: GRC → technical fundamentals → Python → homelab → pentesting
---
- Learning Python from scratch, one
forloop at a time (progress tracked in).
- Working on my DISC profile — turns out being 42% D and 38% C makes me the reliable right hand every boss wants and rarely the one asking to sit in their chair. Working on that second part.
- Architecting secure, agentic AI workflows to automate complex tender operations, data extraction, and document compliance for high-value enterprise processes.
- Optimizing my local media server and managing my digital archives (whenever my old NAS decides to cooperate).
setting up a proper homelab (containerization, secure remote access, VPN, media server), currently blocked by practical constraints, not by lack of will.
open-source, beginner-friendly security projects — LLM/agent red teaming projects — anything you think my profile can help with.
scaling multi-agent systems and refining model-graded evaluation (evals) to guarantee enterprise-level safety and structured outputs; hunting down solid free or low-budget courses and certifications; finding rare, out-of-print book editions on secondhand platforms; and troubleshooting a mesh network held together by a 5G SIM card and sheer optimism.
why the 1974 sci-fi film Zardoz is actually a brilliant, dystopian retelling of The Wizard of Oz, the rebellious life of Paolina Borghese, the raw power of Georges Cziffra's piano playing, how to program a killer push/pull/legs rotation, and why it's not a good idea to book a shooting range session right after a heavy shoulder workout.
I have an insane fixation on training my back. I'm hyperconnected but if the grid collapses, I also know how to cultivate the land and survive from scratch. I can explain the exact etymological link between the words "ductile" and "duce" and I remain convinced that classic retro-gaming strategy teaches more about process management than any business school ever will.
