Technical SEO engineer and security researcher working at the intersection of technical SEO, web infrastructure security, analytics, and implementation quality.
I build systems that help site owners, developers, and SEO professionals verify issues clearly, reduce ambiguity, and improve site performance over time. My work spans WordPress engineering, SIEM deployment and detection tuning, endpoint hardening, telemetry analysis, and forensic documentation.
Most technical problems do not stay in one lane. Search performance, site security, analytics integrity, and infrastructure decisions affect each other. I work where those things overlap, which is usually where the most consequential problems live.
Site architecture, crawl control, internal linking, structured data, migrations, Core Web Vitals, and the implementation decisions that shape long-term search performance.
WordPress hardening, WAF and edge security, web infrastructure resilience, macOS and Linux endpoint hardening, Wazuh SIEM deployment and active response tuning, and firewall telemetry analysis.
GA4, GTM, Microsoft Clarity, event tracking, UTM governance, reporting quality, and the measurement problems that make it harder for teams to trust what the data is actually saying.
| Repository | What it demonstrates |
|---|---|
| threat-observation-pipeline | Local-first Python pipeline for importing Cloudflare Security Events and Firewalla flow exports, with redaction at import time, classification, read-only enrichment gated behind an explicit kill switch, and draft-only report generation. Tested with pytest. |
| page-priority-intelligence | Turns crawl, Search Console, GA4, PageSpeed, and backlink data into a ranked SEO action list with a transparent scoring model, evidence-cited recommendations, and stakeholder-facing reports. Runs locally with no uploads. |
| wazuh-detection-engineering | Sanitized Wazuh detection content from an Ubuntu deployment: custom rules, decoders, IOC handling, active-response guidance, and operator-safety guardrails. |
| elementor-form-hardening | Server-side hardening for Elementor lead forms on WordPress: business-email qualification, validation, and normalization, with PHPUnit coverage and a documented custom-code deployment model. |
| macos-privacy-hardening | macOS workstation hardening covering integrity checks, firewalling, DNS privacy, logging, and version-sensitive validation notes across recent macOS releases. |
| linux-hardening-baseline | CIS-aligned Debian and Ubuntu hardening references covering services, firewalling, SSH, mandatory access control, auditing, and Fail2ban, with explicit test-before-trust guidance. |
| firewalla-flow-analysis-sqlite | Firewall telemetry collection and SQLite-based analysis workflow for reviewing blocked traffic, persistent inbound activity, and rule matches with repeatable queries. |
| white-rabbit-selection-effect | A text-selection interaction for the web and WordPress built on the Range API, with accessibility handling for reduced motion and documented integration paths. |
Two complete sample audits are published on my portfolio as methodology demonstrations, both downloadable as PDFs.
-
Technical SEO Diagnostic: A crawl of a WordPress site on Astra, Elementor, Cloudflare, and FlyingPress. Covers crawlability, indexation, on-page signals, Core Web Vitals, structured data, AI search readiness, internal linking, E-E-A-T signals, and security headers, with a prioritized remediation roadmap and effort estimates.
-
WordPress Performance Review: Evaluates infrastructure response time, Core Web Vitals across three independent measurement sources, caching strategy, asset delivery, image optimization, and CSS optimization, with a sequenced sprint roadmap.
- Google Cloud Professional Security Engineer
- CompTIA Security+
Verification: credly.com/users/jeremyburgos
- Portfolio: jeremyburgos.com
- LinkedIn: in/jeremy-burgos