How I think
I used to play a lot of video games growing up. Not as much these days, but the concepts like game theory, game design and games still matter in the real world.
Cybersecurity feels a lot like a tower defense game:
- You build your defenses and hope to stop the attackers from reaching your core.
- You need to keep developing your skills and knowledge, updating existing infrastructure while implementing new tactics.
- You are constantly adjusting to new forms of attacks and surprises.
If you focus only on the latest and greatest technology, you will soon forget that your fundamentals are not up to standard, and when the bad guys reach close to your castle, it's too late.
id -un
I have been interested in technology and computers since a young age. It probably all started when I was four years old and got my first console, the NES. Getting into games was a natural way for me to become interested in computers and technology in general.
The first game I hacked was Halo for PC. While the "hack" was nothing spectacular (editing values in a hex editor to unlock content or change ammo type), I think that was my "woah, this is possible?" moment.
I self-host many services that are usually provided by someone else. This helps me understand how things work behind the scenes and how these services function. I believe it builds valuable skills and tickles that "how does this work?" itch.
I have previously earned Security+, Network+ and CCNA certifications. Both CompTIA certifications are retired now, but I believe there is still value in showing that you worked toward something and achieved it.
Project Examples
These are just a few examples of my projects. My project management planner is full of ideas and to be implemented projects, such as full identity stack with Authelia and FreeIPa. Time is limited and the most valuable resource we have and allocating it to other hobbies is very important too. Some of these projects will have online documentation and guide to help others avoid the mistakes that I did.
Networking
- OPNsense and pfSense firewalls with IPsec tunnels
- Strict VLAN segmentation and firewall rules
- Tested DNS solutions including Pi-hole, AdGuard, and Technitium
- Configured OpenVPN and WireGuard for secure remote access to my home network, as well as trialed self-hosting ZTNA solutions
Cybersecurity
- Built an Active Directory lab environment
- Used Wazuh to monitor and analyze security events
- Created intentionally vulnerable Windows and Linux server environment for safe exploit testing
Infrastructure
- Proxmox hypervisor running virtual machines and LXC containers
- Portainer managing Docker containers such as CouchDB, Immich, and Draw.io
- Ansible playbooks for task automation, integrated with Gitea
- Self-hosted Nextcloud instance for personal cloud storage
- A Proxmox unprivileged LXC container that runs headless Steam container (this one was difficult!)
Get in touch
Always eager to hear about new possibilities and opportunities.
kimmo [at] kimmovirtanen [dot] tech