Independent Cybersecurity Engineering & AI Security Research

Building Practical Security Systems Through Hands-On Engineering

SMB Defense Technologies documents Christopher Bihiga’s independent cybersecurity engineering and applied security research, focused on external attack surface visibility, evidence-driven security assessment, continuous monitoring, detection workflows, cloud security, and AI-assisted investigation.

Open to workCurrently open to full-time cybersecurity opportunities in Security Engineering, SOC, Detection Engineering, Threat Hunting, Security Automation, and AI Security.

Independent engineering and research project work developed to demonstrate hands-on cybersecurity capability. Not a staffed 24/7 SOC or commercial managed security operation.

Prior enterprise experience

Cybersecurity Experience

9+ years of enterprise cybersecurity operations experience, including SOC work at IBM and SecureWorks, with hands-on experience across threat detection, cloud security, endpoint security, investigations, security tooling, and incident response workflows.

Enterprise SOC Operations
Threat Detection & Investigation
Cloud & Endpoint Security
Security Automation & AI Security

Under Active Development

Current Project — OrdoAI

An AI-native External Security Posture Management platform for small and mid-sized organizations. OrdoAI discovers Internet-facing assets, assesses external exposure, preserves historical evidence, monitors meaningful changes, enriches suspicious indicators, and explains remediation in plain language.

Key operating principle

Deterministic systems establish security facts. AI explains those facts.

Under Active Development

Asset Lifecycle v1

Complete
End-to-end discovery and lifecycle eligibility, UI, reporting, and tests.

Evidence Integrity

Complete
Positive observation handling, async detector coverage, scan attribution, client-side retention.

Findings Authorization / RLS

Hardened
Tenant read isolation, status-only member updates, service-role reconciliation.

Redirect Intelligence v1

Approved Next
Safe redirect discovery, trusted baselines, deterministic risk, conditional enrichment.

Change Detection v1

Planned
Compare trusted previous state with current state to create meaningful change events.

AI Agents

Future
Agents have not yet been introduced. Narrow, governed agent workflows remain future work.

Engineering validation evidence

Validated Engineering

Verification results from the current development state, presented as engineering evidence rather than marketing metrics.

  • 83 automated tests passing, 0 failed.
  • TypeScript passes with zero diagnostics.
  • Production build passes.
  • demo.testfire.net validation: reachable HTTP 200, detector coverage successful, 13 open findings refreshed without duplicates.
  • RLS isolation tests passed for same-tenant, cross-tenant, anonymous, status-only updates, invalid status, and service-role lifecycle in isolated PostgreSQL testing.
  • Zero duplicate finding keys in validation scans.

Where to go next

Each area of the project is documented separately.

01OrdoAI capabilities

What the platform already does today, from asset discovery through reporting.

02Engineering principles

The evidence, isolation, and lifecycle rules the system is built around.

03Roadmap

Redirect Intelligence v1, change detection, and future agentic research.