$ cat /home/jaalso/about.txt

After 8+ years in IT infrastructure and system administration — at a private bank in Zürich and at a large enterprise (Microsoft) — I moved into the world of cybersecurity, which I find genuinely fascinating. I’m working through the Swiss Cyber Institute’s Cyber Security Specialist program (SCI 2511) — a federally recognised qualification that, under Switzerland’s 2026 vocational reform, carries the new Professional Bachelor title — and pursuing the CEH alongside it.

My target is security engineering, ethical hacking, and junior penetration testing, and I’m open to security consulting. I work across both sides — building detections and doing host forensics on the blue team, and enumeration-to-exploitation labs on the red team — because understanding one makes you better at the other.

What’s here

Lab write-ups, CTF solutions, and notes. The full ones are posts on this site; others link out to the repos where they live. I keep the descriptions honest: where I followed a tutorial, I say so, and I don’t dress lab work up as something it wasn’t.

Background that’s actually relevant

Years in banking and enterprise infrastructure means I read finance and business-logic systems differently than someone coming straight from a generic pentest course — useful for fintech targets and business-logic bugs, not just flag-grabbing.

Real-world

• NCSC.ch acknowledgment — phishing triage contributing to Storm-1865 campaign analysis (email header & infrastructure forensics).

Find me

• GitHub — github.com/jaalso
• HackTheBox — Bornia01
• TryHackMe — tryhackme.com/p/jaalsove

$ # languages: EN (fluent), ES (fluent), DE (B1, improving)