IT student · Cybersecurity track

Miguel Joseph M. Medina

I'm a BS Information Technology student at Mapúa Malayan Colleges Laguna, specializing in Cybersecurity. During my practicum at Gardenia Bakeries Philippines, I took a quality document control process from requirements gathering to a working workflow in the company's document management system, and I tested production-bound releases. I'm looking for an entry-level role in systems administration or business analysis.

Academic achievements

  • Dean's ListerA.Y. 2022–2025 · Mapúa Malayan Colleges Laguna
  • ScholarOne semester, 2022
  • JISSA memberJunior Information Systems Security Association

About

Systems first, with an analyst's eye

My coursework covered Windows Server and Active Directory, Linux, CCNA networking, ethical hacking, and systems analysis and design. Keeping systems organized, secure, and running is the work I want to grow in, which is why systems administration is my first choice.

My practicum showed me the other side of IT: sitting with business users, mapping how their work actually happens, and turning that into a system they can use. I'd like a role where both of those skills count.

Experience

Practicum and work

486practicum hours
1,184conversion test cases
3process pools designed
11workflow steps built

Gardenia Bakeries (Philippines), Inc.

MIS Department · Biñan, Laguna · IT199F practicum

April – July 2026

Gardenia's MIS business analysts work much like project managers, running projects end to end. They gather requirements from the business units, design the process, write the functional specification that developers and testers work from, and follow the work through testing. I trained into that role and spent most of my practicum on one project, with quality assurance work alongside it.

Main project: digitizing document control

The problem

The quality management system's document control process covers how controlled documents are created, revised, withdrawn, re-approved, and reinstated. It ran on shared drives, spreadsheets, and hand stamps.

What I did
  • Ran requirements gathering with the document control team and mapped the current process. The six documented procedures turned out to be one skeleton with variations: four patterns that share one closing.
  • Designed the To-Be for three process pools in draw.io, at overview and detailed levels, and presented it to my supervisor and the business user.
  • Built and tested it in the development workspace of the company's document management system, IComTeq IMS. The build included an 11-step approval workflow, a copy-request workflow, an 18-tag tag set that replaced the physical stamps, fail-safe approval gates, and a controlled folder structure.
  • Recorded fourteen behaviors of the platform that shaped the design, including a tag-overwrite problem I worked around.
  • Wrote the Functional Specifications Document and handed over the project on my last day.
Result

A published, tested workflow in the development workspace, a specification for the next phase, and a documented list of open items.

Quality assurance

  • Ran 1,184 end-to-end test cases for a key retail customer's sales conversion, from the sales order to the printed invoice and its posting to the finance system, before the change was deployed to production.
  • Ran Android 16 compatibility testing of the field sales tablet apps: two cycles of 235 test cases, with screen recordings as evidence for the developers.

AppSheet access-request app

BAQADev

  • Supported a low-code app that replaced a Google Form for requesting access to company systems, while a fellow intern led the build.
  • Took down the requestor's changing requirements and helped keep the feature list; tested the multi-stage approval flow against test scenarios; built fields with conditional logic and corrected outdated options.

Also

  • Mapped the customer and product fields of the legacy sales systems for a planned migration.

Software I learned and used

Entries marked New to me are systems I learned on the job.

  • Document managementIComTeq IMS New to me

    Built the tag sets, workflows, and controlled folders for the document control project.

  • Process modelingdraw.io

    Drew the As-Is and To-Be maps, at overview and detailed levels.

  • Sales and deliverySales System and SFA New to me

    Tested deliveries from the SFA Web portal and the SFA Downline and Feeder tablet apps through to the Sales System, and mapped their fields.

  • PlanningForecast and allocation tools New to me

    On a remote workstation, ran sales forecasts, assigned Daily Stock Control documents, and allocated stock for test routes.

  • FinanceOracle E-Business Suite New to me

    Checked how test invoices interfaced to Oracle, and ran Create Accounting.

  • Low-code appsGoogle AppSheet New to me

    Built fields with conditional logic and corrected outdated options.

  • Issue trackingJira

    Tracked sprint work and logged defects for the developers.

  • DatabaseMicrosoft SQL Server

    Wrote queries to look up and reset test data.

  • CollaborationGoogle Workspace

    Kept the test cases, test data, and data mapping in Google Sheets.

Subtitle Proofreader

Part-time · Remote

November 2025 – present

I proofread English subtitles translated from Japanese, improving the wording and fixing errors so every line reads as natural American English.

  • Built subproof, a Python tool that runs a first proofreading pass with a language model and logs every change for my review.
  • Proofreading
  • American English
  • Python
  • OpenRouter

Projects

Projects and research

Part of the capstone's conceptual framework, showing the citizen mobile app, the CDRRMO web portal, and the responder app.

Track 01Capstone · 2025 – present · Researcher & Developer in a team of three

Community-Based Reporting and Response System with Geotagging

A cross-platform system for the Biñan City Disaster Risk Reduction and Management Office. Citizens send geotagged incident reports from a mobile app, CDRRMO operators manage them from a web command center, and responders work from their own app. I built the role-based admin portal, with MFA-secured operator login, and the citizen identity verification flow, which uses government ID upload, image review through signed URLs, and full audit logging. I also gathered requirements with the CDRRMO and helped design the system to comply with the Data Privacy Act of 2012.

  • Next.js
  • React Native
  • TypeScript
  • Supabase
  • Row-Level Security
$ python subproof.py ./inbox --dry-run
3 file(s) [dry run]
  episode-01.ass: 412 lines, ~11 API calls
  episode-02.ass: 389 lines, ~10 API calls
  episode-03.srt: 356 lines, ~9 API calls
$ python subproof.py ./inbox -o ./proofed \
    --template house.ass --report changes.txt
  episode-01.ass: 37/412 changed -> episode-01.ass
Example output with made-up file names.

Track 02Personal project · 2026 · Python

subproof: LLM-Assisted Subtitle Proofreading

I proofread subtitles part time, so I built a command-line tool that does the first pass. It sends only the dialogue text to a language model through OpenRouter, after hiding the typesetting tags behind placeholders, and checks every batch's line and placeholder counts before writing anything back. A batch that fails is retried once and otherwise left untouched. It also estimates API calls in a dry run, filters by style, applies house-style templates, works through files in parallel, and writes a change report for human review.

  • Python
  • OpenRouter
  • LLM APIs
  • pysubs2
  • CLI automation
Diagram of the cascaded cipher: plaintext passes through Blowfish, Salsa20, and AES to become ciphertext, and back.

Track 03Research paper · November 2025 · Second of three authors

Fish Tacos!: A Multi-Layer Blowfish–Salsa20–AES Model

I programmed a cascaded cipher in Python that passes data through Blowfish, Salsa20, and AES. I then measured its ciphertext's randomness with Shannon entropy, chi-squared, monobit, and runs tests, and benchmarked its key generation, encryption, and decryption. The paper is written in IEEE conference format.

  • Python
  • PyCryptodome
  • Cryptography
Layout of the four-way intersection, with a traffic light and an ultrasonic detection sensor on each approach.

Track 04IoT machine problem · Oct – Nov 2025 · Programmer in a group of five

NCAP Traffic Light System

A four-way intersection controller for no-contact apprehension. An Arduino UNO and a WeMos D1 (ESP8266) run the lights. Four ultrasonic sensors catch cars that cross on red, sounding a buzzer and logging the violation, and pedestrian buttons stop traffic on demand. I proposed the design and built the Android app and the web interface, backed by MySQL, for controlling the system and reviewing its recorded violations.

  • Arduino
  • ESP8266
  • Android Studio
  • XAMPP
  • MySQL

Track 05Systems Analysis & Design · Sep – Nov 2024 · Team of four

Production MIS for Showa Advance Manufacturing

An analysis and design of a production management information system for a real manufacturing client in Laguna Technopark, from client interviews to a Figma prototype. I kept the project schedule (the work breakdown structure and Gantt chart) and the meeting minutes. I also contributed to the data flow diagrams, the HIPO and IPO charts, and the system documentation.

  • Systems analysis
  • Data flow diagrams
  • Figma

Track 06Machine problem · July 2025

Password Manager

An Android app in Kotlin that stores encrypted passwords in a MariaDB database through PHP endpoints. I also researched Android's Autofill and Credential Manager for the save-password prompt.

  • Kotlin
  • PHP
  • MariaDB

Track 07Ethical hacking · June 2025 · Individual

Vulnerability Assessment

A vulnerability assessment and penetration test of a target virtual machine from Kali Linux: host discovery with fping, port scanning, and a Nessus vulnerability scan, written up as a full report.

  • Kali Linux
  • Nmap
  • Nessus

Track 08Cryptography · March 2025 · Group project

Cryptographic Program

A C# console app with the Caesar, Vigenère, and bitwise XOR ciphers, plus a custom cipher of our own.

  • C#
  • .NET 8

Track 09Cisco Networking Academy · 2024 – 2025

CCNA Coursework

Introduction to Networks: 100/100 on the departmental final exam. Switching, Routing & Wireless Essentials: 97% on the course final exam and 100% on the final Packet Tracer skills assessment.

  • Routing & switching
  • VLANs
  • Packet Tracer

Skills

What I work with

Systems & networking

  • Windows Server
  • Active Directory
  • Linux (Kali, Pop!_OS)
  • LAN/WAN
  • VLANs
  • ACLs
  • Cisco Packet Tracer
  • VirtualBox

Security

  • Vulnerability assessment
  • Kali Linux
  • Nmap
  • Nessus
  • Applied cryptography

Business analysis & QA

  • Requirements gathering
  • Process modeling (draw.io)
  • Functional specifications
  • Test case design
  • Jira

Development

  • Python
  • Java
  • JavaScript
  • TypeScript
  • Kotlin
  • PHP
  • C#
  • C++
  • SQL
  • React
  • React Native
  • Next.js
  • Supabase

Databases & platforms

  • MySQL / MariaDB
  • PostgreSQL
  • SQL Server
  • IComTeq IMS
  • Google AppSheet
  • Google Workspace

Languages

  • English (TOEIC L&R 890; Speaking 170, Writing 200)
  • Filipino

Certifications

Credentials

  • CompTIA Tech+CompTIA · December 2025 · verification code fea0dc17009941df9d3a7e08ca1d27a4
    Verify
  • Full Stack Web DevelopmentAmazon, via Coursera · March 2026
    Verify
  • Foundations of Project ManagementGoogle, via Coursera · March 2026
    Verify
  • Job Ready: Employability Skills (Basic)Wadhwani Foundation · July 2026 · 75 hours
  • Google Cloud Computing FoundationsGoogle · 2025
  • Ethical Hacker (badge)Cisco · 2025
  • TOEICETS · June 2025 · Listening & Reading 890; Speaking 170, Writing 200

Seminars

Seminars and workshops

March 14, 2026 · Onsite, 4 hours · MMCL CCIS

Cloud Foundations: From Core Concepts to Career Certification

A network engineer sketched VPCs, subnets, and edge locations on the board, then demonstrated the firewall software his company uses to manage traffic and stop threats.

Watching a professional configure rules and read logs in a production-grade tool bridged my classroom theory and industry reality, and the career talk made the certification path feel attainable.

March 16, 2026 · Webinar, 1 hour · EPCPS

Data Privacy and Protection in the Digital Era

An overview of the Data Privacy Act and good digital hygiene.

"Privacy by design" isn't a buzzword for a capstone; it's a professional obligation. A leak isn't just a bug, it's a breach of rights.

March 19, 2026 · Webinar, 1 hour · EPCPS

IoT Unplugged: From Devices to Data Intelligence

An industry view of IoT architecture, from sensors and gateways to cloud integration.

The Internet of Things is less about the things themselves than about the insights pulled from the data they generate.

Global AI Manila

AgentCamp

A hands-on workshop on building AI agents.

Developed and deployed AI-powered agents on Microsoft Azure, using shell scripting and environment provisioning.

Contact

Let's talk

I'm open to entry-level roles in systems administration and business analysis. Email is the best way to reach me.