Robin Reel

Springfield, MO (open to relocation or remote) | robin@dreamstation.systems | (417) 209‒6319 | https://dreamstation.systems/professional/

Security‐minded systems administrator and IT generalist. Seeking full‐time employment beginning May 2027.

Education

Bachelor of Science in Information Technology

, IT Infrastructure Track — Missouri State University, Springfield, MO

Expected May 2027

Certifications

CompTIA A+, CompTIA Network+, CompTIA Security+ All earned 2026

Work Experience

IT Specialist

(August 2026 – Present) ·

IT Intern

(April 2026 – August 2026) — Health Hub Clinic & Health Guardian Imaging

Found and escalated a PHI‐exposing authentication bypass vulnerability in the in‐house EMR; verified developers’ remediation
Discovered an unauthenticated endpoint allowing attackers to HTTP PATCH patient charts, including medications and allergies; verified remediation
Replaced near‐EoS Windows Server 2016 infrastructure (file server and AD DCs) with Samba on Debian Linux, saving ≥$3,000 in upgrade costs
Configured and deployed Wazuh SIEM, with agents on office servers, ~20 workstations, and the PACS gateway
Found three vulnerabilities in other in‐house software (stored XSS via poorly sanitized UGC, two instances of broken access control exposing private messages); fixed two and escalated one to developers, verified remediation
Configured Intune compliance baselines and Entra ID Conditional Access policies supporting HIPAA compliance for Windows, Office, and Teams
Documented the network environment when no documentation existed by using Nmap, analyzing SonicWall configuration, and physical tracing
- Discovered and fixed security issues during this process (SMB signing disabled, EoS software running, unencrypted DICOM on the general office LAN)
Discovered long‐standing unenforced DMARC and broken SPF on one domain; demoed email spoofing and then remediated
Conducted authorized phishing simulation; crafted custom replica Google login and document sharing email; communicated results to leadership
Restored server access in 2 hours after storm damage to a jumpbox; diagnosed electrical pitting on a RAID controller pin and shimmed the connection
Rearchitected routing, allowing a subtenant to share our ISP connection without changing our addressing scheme or exposing internal services

Open‐source Contributions and Security Research

Manifold Markets

— Discovered and responsibly disclosed a double‐spending bug in limit orders and was awarded a bug bounty

OpenEMR

— Independently discovered and reported GHSA-phvv-q7m7-8mc2, a broken access‐control bug where low‐privilege users can change or destroy document templating, allowing them to wipe the profile setup or push bogus documents to patients.

Arch User Repository

— Maintainer for seven packages; writing build scripts with signature verification to distribute software to Arch Linux users via Git

Upstream Contributions

— Nine pull requests merged into existing projects; contributed to Toki Pona localizations for Firefox

Projects

Homelab: SLEEPTIME-NETWORK

— AS403102 SLEEPTIME-NETWORK is a multihomed autonomous system upstreamed at Tritan and Route64. I run BGP with BIRD from a Debian server, with local‐preference and AS‐path prepending to steer traffic and fail over automatically. I secured routing with IRR route6/aut-num/as-set objects and RPKI ROAs, meeting upstream filtering requirements and rejecting RPKI‐invalid routes. My home network connects through a WireGuard tunnel to the VPS, using policy routing, nftables, radvd, and Kea DHCPv6 with prefix delegation.

Homelab: dreamstation.systems

— dreamstation.systems hosts one NTS server and two NTP servers participating in pool.ntp.org that serve over 500 million NTP requests per day and has seen 147 million unique IPs. dreamstation.systems also hosts a personal email server with SPF, DKIM, DMARC, MTA-STS, and TLS-RPT configured. It also hosts a website, Gopher, Gemini, an obfs4 Tor bridge, and several other protocols. I also operate lawa, a web crawler collecting data on HTTP headers for future analysis. Live data is available: https://dreamstation.systems/personal/lawa.html

Homelab: home network

— I configured a segmented home network using VLANs. It uses a Wazuh SIEM instance to gather logs and flag anomalous traffic. It uses dual‐stack IPv4 and IPv6 (with IPv6 in a SLEEPTIME-NETWORK prefix). I also automated parsing and summarization of unsupported log sources using Perl scripts, Bash scripts, and local LLMs (Qwen models).

Vulnerable DKIM key scanning project

— I scraped DKIM records using the Tranco top million domains list and lists of common DKIM selectors. I then ran them through badkeys, identifying >50 CVE-2008-0166‐affected keys, hundreds of legacy bruteforceable 512‐bit keys, and >20 inadvertently published private keys. I reported all issues to each domain’s RFC 9116 contact, or where not available, their postmaster email address.

!~ATH

— I designed and developed an esoteric concurrent programming language (https://github.com/robinpie/ath) where all control flow waits for entity death. It supports networking, I/O, and a C FFI.

ilo toki nasa

— I trained an 11M‐parameter LLM decoder on the Toki Pona language after cleaning the training corpus through rule‐based filtering.

OpenGET

— I built an Old School RuneScape Grand Exchange market analysis tool (https://grandexchange.dreamstation.systems) using a Go backend with a SQLite database. It ingests data into dual‐pool WAL SQLite with nightly rollup, prune, and compaction. It has an accountless, cookie‐based identity model.

Technical Skills

	Proficient	Familiar
Operating systems:	Linux (server and desktop), Windows desktop	Windows Server
Infrastructure and tools:	SonicWall, Wazuh, SMTP, DNS, BGP	VMware ESXi, Samba, Nmap, Wireshark, Git, systemd
Endpoint management:		Microsoft Intune, Entra ID (Azure AD)