root@bengomez:~$ whoami

Ben Gomez

// Cybersecurity & IT Support Professional

Aspiring cybersecurity professional with hands-on IT support experience and a passion for solving real technical problems — from OS deployments and BIOS updates to Python security scripts and Linux system administration.

Get in Touch View Security Stack
// live production server

Security Stack

This portfolio is self-hosted on an Ubuntu Server, secured and hardened end-to-end. Every layer below is actively running in production.

🔒
Let's Encrypt / Certbot
Trusted HTTPS certificate via DNS challenge. Auto-renews every 90 days using DuckDNS TXT record hooks.
ACTIVE — TLS_AES_256_GCM_SHA384
🌐
Apache2 + Security Headers
Version info hidden. X-Frame-Options, X-Content-Type-Options, and X-XSS-Protection headers enforced on all responses.
ACTIVE — Apache httpd
🛡️
ModSecurity + OWASP CRS
Web Application Firewall blocking SQL injection, XSS, and other OWASP Top 10 attacks in real time.
ACTIVE — Engine: ON, CRS 4.x
🚫
Fail2ban
4 active jails monitoring SSH and Apache logs. Bans IPs after 3 failed attempts for 1 hour.
ACTIVE — 4 jails running
🔥
UFW Firewall
Default deny all incoming. Only ports 22 (SSH), 80 (HTTP), and 443 (HTTPS) are explicitly allowed.
ACTIVE — Default deny incoming
👥
CrowdSec
Community-powered threat intelligence. Shares and receives blocklists from thousands of global servers.
ACTIVE — Firewall bouncer enabled
🌍
DuckDNS + Auto IP Update
Dynamic DNS subdomain with a cron job updating the IP every 5 minutes to handle ISP address changes.
ACTIVE — Updates every 5 min
🔄
Auto Cert Renewal
Certbot renewal hook scripts automatically update the DuckDNS TXT record and reload Apache on renewal.
ACTIVE — Runs nightly at 03:00
📡
Security Monitor (Python)
Custom Python daemon that tails Apache, Fail2ban, ModSecurity, and auth logs in real time and sends email alerts on new bans, WAF blocks, failed SSH logins, and 404 scan spikes. Runs continuously as a systemd service.
ACTIVE — systemd service, 60s poll interval
// nikto scan comparison

Before vs After Hardening

BEFORE — baseline scan
✗ Apache/2.4.66 version exposed
✗ X-Frame-Options header missing
✗ X-Content-Type-Options missing
✗ X-XSS-Protection missing
✗ ETags leaking inode data
✗ 997 ports closed (visible)
✗ 3 issues reported by Nikto
AFTER — hardened scan
✓ Version hidden — "Apache" only
✓ X-Frame-Options: SAMEORIGIN
✓ X-Content-Type-Options: nosniff
✓ X-XSS-Protection: 1; mode=block
✓ ETags leaking fixed
✓ 997 ports filtered by UFW
✓ 0 errors reported by Nikto
// what I work with

Technical Skills

Operating Systems

Windows Linux Ubuntu Server Debian BIOS/UEFI

IT Support

OS Installation Factory Resets Antivirus Hardware Remote Support

Networking

TCP/IP DNS DHCP Port Forwarding SSH

Cybersecurity

Python Scripting Threat Analysis Log Analysis WAF IDS

Server Tools

Apache2 ModSecurity Fail2ban UFW CrowdSec Certbot

Tools

CLI nmap nikto Git Firmware Updates
// where I've worked

Work Experience

Print Dept. / Onsite Helpdesk IT Associate
OfficeMax
1 Year
  • In-store technical support and troubleshooting for customer devices
  • Performed factory resets, OS installations, and full system setup
  • Updated BIOS and firmware on supported devices
  • Installed and activated antivirus software using license keys
  • Assisted with printing, copying, and document services
Enrollment Advisor
Primavera Online School
1 Year
  • Assisted students with enrollment and system navigation
  • Maintained accurate digital records and ensured compliance
  • Technical and administrative support via phone and email
  • Resolved issues efficiently using structured problem-solving
Assistant Manager
Circle K
—
  • Managed daily operations, inventory, and cash handling
  • Supervised and trained staff members
  • Maintained organized workflows and delivered strong customer service
// things I've built

Projects

🖥️
Self-Hosted Hardened Web Server
Built and secured a production web server on Ubuntu Server — Apache2, HTTPS, ModSecurity WAF, Fail2ban, UFW, and CrowdSec. This site runs on it.
🐧
Linux System Setup
Configured and maintained Linux environments for hands-on practice. Covers package management, user permissions, file system navigation, and CLI workflows.
📡
Python Security Monitor
A Python daemon that tails Apache, Fail2ban, ModSecurity, and SSH auth logs in real time, then emails alerts on new IP bans, WAF blocks, failed logins, and 404 scan spikes. Deployed as a systemd service on this server.
▸ View source on GitHub
// credentials

Certifications

🎓
Google IT Support Professional Certificate
Coursera · Google
🔧
Technical Support Fundamentals
Coursera · Google
🐍
Introduction to Python for Cybersecurity
Coursera
🐧
Linux Fundamentals
Coursera
// academic background

Education

Bachelor's Degree in Cybersecurity
Central Arizona College
IN PROGRESS
General Educational Development (GED)
Rio Salado College
COMPLETED
// let's connect

Open to Opportunities

Currently seeking IT support or entry-level cybersecurity roles. Feel free to reach out — I respond promptly.

Send an Email
📞 (480) 349-3722 ✉ Ben.J.Gomez@icloud.com 📍 Mesa, AZ