Paul Turner
Cybersecurity Engineering Practitioner & Researcher · Founder, Responsible Cloud LLC · MS Cybersecurity Candidate
Cybersecurity Engineering. Cloud Security. Verifiable Risk Reduction.
I build and document practical cybersecurity projects across cloud infrastructure, identity security, detection and response, network defense, industrial systems, and security governance. My portfolio connects technical implementation with measurable risk reduction.
Portfolio status
- Project records
- 14
- Completed
- 0
- In progress
- 1
- Planned
- 12
- Research
- 1
- Evidence artifacts published
- 0
Counts are computed from the published project records. A project is marked Completed only when its evidence is published. How status is defined.
At a glance
What you can check here
Hiring managers
Targeting cybersecurity engineering, cloud security, security operations, systems administration, and risk and compliance roles.
Career focus and target rolesEngineering managers
Each project record lists environment, architecture, tools, test procedure, results, and evidence, with an honest status label. Projects map to NIST SP 800-53 controls and named competencies.
Inspect project recordsResponsible Cloud prospects
Responsible Cloud LLC helps small businesses turn cloud and technology risk into clear, practical action, using a Discover → Assess → Prioritize → Assign → Reduce → Prove method.
Founder and methodologyFocus areas
Six areas of practice
Each area links to its project records or research. Status labels show what is complete, in progress, or planned.
-
01 Cloud and Identity Security
AWS IAM least privilege, S3 data protection, CloudTrail and AWS Config evidence, cloud network security.
Cloud and identity projects -
02 SOC and Incident Response
Windows and Linux log investigation, Splunk searches, detection rules, incident timelines, and reporting.
SOC and incident response projects -
03 Network and Systems Security
Segmented home lab with VLANs and firewall policy, Raspberry Pi 5 services, and Windows and macOS hardening.
Network and systems projects -
04 OT and Industrial Cybersecurity
Purdue Model architecture, PLC/HMI/SCADA zones, vendor access, and OT incident response, using clearly labeled simulations.
OT and industrial projects -
05 Governance and Evidence Engineering
NIST CSF 2.0, NIST SP 800-53, RMF, risk registers, POA&M, and control testing that produces retained evidence.
Governance projects -
06 AI Security and Responsible Infrastructure
AI governance and accountability for cloud and AI infrastructure. This is research, labeled as conceptual where it has not been published.
AI infrastructure research
Featured
Featured engineering projects
Status labels show actual progress. Evidence and repository links appear only once real artifacts are published.
-
Secure Web & Small-Business SecurityIn Progress
Portfolio Website Security Hardening
Hardening this static portfolio site: removing unverifiable content, applying a restrictive Content-Security-Policy, removing a non-functional data-collection form, adding automated link and content-integrity checks, and documenting CloudFront security headers and redirects.
View project record: Portfolio Website Security Hardening -
Cloud & Identity SecurityPlanned
AWS Account Security Baseline: Least-Privilege IAM and CloudTrail Evidence
Build a documented security baseline for a personal AWS sandbox account: root-account lockdown, MFA, role-based least-privilege IAM, and multi-region CloudTrail logging, with evidence collected for each control.
View project record: AWS Account Security Baseline: Least-Privilege IAM and CloudTrail Evidence -
SOC & Incident ResponsePlanned
Windows and Linux Log Investigation Lab with Splunk
Ingest Windows Security events and Linux authentication logs from lab hosts into Splunk, then investigate a self-generated suspicious-activity scenario and write an incident timeline.
View project record: Windows and Linux Log Investigation Lab with Splunk -
Network & Systems SecurityPlanned
Segmented Home Lab Network: VLANs, Firewall Policy, and Raspberry Pi 5 Services
Design and document a segmented lab network that separates trusted devices, lab systems, and IoT, with deny-by-default firewall rules between segments and a Raspberry Pi 5 hosting monitoring services.
View project record: Segmented Home Lab Network: VLANs, Firewall Policy, and Raspberry Pi 5 Services -
OT & Industrial CybersecurityPlannedSimulation
Fictional Paper Mill OT Reference Architecture (Purdue Model)
Design a security architecture for a fictional paper mill using the Purdue Model: asset inventory, PLC/HMI/SCADA zones, an industrial DMZ, conduits, and vendor remote access. Simulated: no real plant, PLCs, or production systems are involved.
View project record: Fictional Paper Mill OT Reference Architecture (Purdue Model) -
Governance & Evidence EngineeringPlannedSimulation
NIST CSF 2.0 Profile and Risk Register for a Fictional Small Business
Build current and target NIST CSF 2.0 profiles for a fictional small business, then a risk register that links each gap to an owner, an action, evidence, and residual risk.
View project record: NIST CSF 2.0 Profile and Risk Register for a Fictional Small Business
Evidence standard
Claims you can check
Every project follows the same record: objective, environment, architecture, tools, sanitized configuration, implementation steps, test procedure, results, evidence artifacts, and lessons learned.
Nothing is marked complete without published evidence. Simulated environments, such as the fictional paper mill used for OT work, are labeled as simulations.
Responsible Cloud LLC
Founder, Responsible Cloud
Responsible Cloud helps small businesses thrive by turning cloud and technology risk into clear, practical action, with an emphasis on clarity, priority, documentation, and accountability.