Hardware & devices
PC and mini PC assembly (RAM, M.2 SSD), BIOS/UEFI configuration, memory testing, soldering, Arduino and Raspberry Pi.
IT Support • Security Monitoring • Software Development & Testing
From hardware to code — IT with a security mindset
I am a qualified Software Developer and Tester with an electronics and automation background. I build and run my own segmented home network and security lab, and I develop web and mobile applications.
Open to junior IT support, help desk, desktop support and SOC L1 roles — Budapest area or hybrid.
OPNsenseVLAN / 802.1QSuricata IDSWiresharkLinuxWindowsC# / .NETVue.jsFlutter
What I work with
Skills across hardware, networks and code
The areas I practise hands-on — in my lab, my projects and my studies.
Networking
TCP/IP, VLANs and 802.1Q trunking, managed switches, DHCP, firewall rules on OPNsense and cabling.
Security monitoring
Suricata IDS, Wireshark traffic analysis, Nmap, incident and risk reports, SOC fundamentals.
Systems
Windows administration, the Linux command line, permissions, services, logging and bash scripting.
Development & testing
C#, .NET, Vue.js, Flutter, MySQL, REST APIs and JWT — two applications deployed live.
Home lab · in progress
Segmented home network & security lab
My real home network, rebuilt as a hands-on lab. I assembled the firewall myself, designed the segmentation, and verify every rule with measurements instead of assumptions.
Status
Phase 1 done · IDS live
4VLAN segments: management, trusted, IoT and lab
28isolation tests — zero deviations
IDSSuricata running, detection proven with a test alert
NextWazuh SIEM with Sysmon endpoint logs
What's done
- Assembled an Intel N100 mini PC as the firewall (RAM, M.2 SSD, thermal pad) and hardened its BIOS: flash write protection, supervisor password, USB boot off
- Installed and configured OPNsense: interfaces, NAT, DHCP ranges and firewall rules
- Split the network into four VLANs carried over a single 802.1Q trunk ("router on a stick") with a managed switch
- Verified the isolation with a full test matrix from every segment: 28 measurements, zero deviations
- Found and closed a real gap: the ISP router was reachable from every VLAN
- Suricata IDS running on two segments with daily rule updates; now in a tuning week before switching to IPS
“A firewall rule you haven’t tested is only an intention.”
What's next
- Wazuh SIEM with Sysmon endpoint logs, and Suricata alerts forwarded into it
- Zeek for network metadata alongside the IDS
- Admin lockdown and MFA on every management interface
- Tailscale for remote access — the connection sits behind CGNAT, so no inbound ports are opened
- A lab VM with attack simulations to check which techniques the SIEM actually catches
OPNsense802.1QSuricataWazuhSysmonZeekTailscale
Portfolio
Featured projects
Networking, security and software projects built around real problems.
Technical background
Hardware-adjacent and cybersecurity experience
Alongside software development, I have worked with hardware-adjacent technologies. This helps me understand systems not only from the user interface, but also from the network and device level.
Focus
Software + hardware + security
Raspberry Pi and Linux systems
I have worked with Linux-based systems, network configuration, services and cybersecurity-oriented tool environments.
Arduino and microcontrollers
I have basic experience with Arduino-based control, LCD displays and simple electronic circuits.
Electronics basics and soldering
Through my electronics studies, I gained experience with board assembly, soldering and controller-chip based solutions. I am a certified electronic equipment assembler.
Networks, NFC and radio frequency
For learning and prototyping, I have explored network protection, NFC, radio-frequency technologies and security-aware testing.
Experimental hardware and cybersecurity project
I built an experimental solution where a soldered controller board and LCD display were connected to an application workflow. The goal was not industrial hardware development, but practising how software, hardware and a cybersecurity mindset work together.
Learning
Cybersecurity learning path
What I study alongside the lab — logged, practised hands-on, and kept honest about what is finished and what is still in progress.
Pre Security path
49 topics completed — in the top 10% of TryHackMe users.
Google Cybersecurity courses
3 courses completed: Foundations of Cybersecurity · Play It Safe · Connect and Protect. Work products: risk assessment, incident report, network traffic analysis, controls and compliance checklist.
Hands-on in a Kali VM
Linux Basics for Hackers: 15 of 16 topic areas practised hands-on. The Linux Command Line: in progress, with my own notes and cheat sheets.
A real incident in my own project
A database password ended up in a public repository. I rotated it, made the repository private, removed the secrets from version control, and wrote an incident report.
Firmware and hardware security
While hardening my firewall’s BIOS I studied what monitoring tools cannot see: SMM, Intel ME and DMA attacks, and why the IOMMU matters.
Burp Suite practice
SQL injection and web request manipulation in legal practice labs — to recognise attacks from the defender’s side.
Tryable solutions
Demo center
Applications you can try through live links.
MVP Planner / Client Manager
A project, job application and client management system with a public demo and login option.
Open MVP demoTeacher Score
An educational scoring and evaluation application with a live demo interface.
Open Teacher Score demoThreatWatch – cybersecurity app
Flutter mobile toolkit: CVE/KEV tracking, URL and QR phishing checks, password strength and more.
View on GitHubAbout
Hands-on, security-minded and curious
I am Dominik Derda, a qualified Software Developer and Tester with an automation and electronics background. I like understanding systems end to end — from the circuit board and the cable to the firewall rule and the code.
I am looking for my first IT role — help desk, desktop support, IT operations or SOC L1 — where I can keep learning inside the field.
Focus areas
- Hardware troubleshooting and device setup
- Networks: VLANs, firewalls, switching
- Security monitoring: IDS, traffic analysis, incident reports
- Windows and Linux systems
- Web and mobile development, software testing
Education
Education and development
Software Developer & Tester
Szegedi SZC Vasvári Pál Technical School – web, backend, database and software testing.
Automation and electronics
Wigner Jenő Technical School – electronics, automation, programming basics; certified electronic equipment assembler.
AI basics for everyone
Gábor Dénes University – micro-credential, ID ALMC/2025/013666.
Contact
Looking for my first IT role
If your team needs a junior IT support, help desk or SOC L1 colleague, I would be happy to talk. I can walk you through my lab and projects in detail.