Cloud Security Engineer blending Azure and AWS security engineering with hands-on network defense, Identity an Access Management and DevSecOps automation — AZ-500 SC-300 AZ-700 certified, currently working toward SC-100 (Security Architecture), AZ-400 (DevOps Engineer Expert) and AWS Security Specialty
- 🎓 Came up through a Software Systems Engineering background before specializing in security
- 🧠 I learn by building and reverse engineering — every project below started as "how does this actually work under the hood?"
- 🛠️ Currently building: hands-on Security projects both locally and in cloud environments, and Also actively working on Software Engineering
- 🎸 Away from the terminal: reading, writing, learning guitar, and staying active
🎯 Currently pursuing: SC-100 (Cybersecurity Architect Expert) · AZ-400 (DevOps Engineer Expert) · AWS Security Specialty
|
Cloud Security
|
Network Security
|
DevSecOps & AI Security
|
|
A 7-service e-commerce app running end-to-end on AWS EKS — Terraform-provisioned VPC/EKS, GitHub Actions CI with OIDC (no long-lived keys) plus gitleaks/Trivy scanning, GitOps via ArgoCD, and full observability with Prometheus/Grafana. Ships with Kira, a Bedrock AI agent that answers questions about live logs, metrics, and service health through a Streamlit chat UI. Passed a 28-issue security audit — secrets removed, least-privilege IRSA, default-deny NetworkPolicies.
|
An automated web-app pentesting toolkit covering the OWASP Top 10 across 30+ checks. Crawls a target, runs concurrent vulnerability scans, and sends HIGH/CRITICAL findings to an AI provider for CVSS scoring and fix suggestions — usable as a Streamlit dashboard, a FastAPI service for CI/CD, or a CLI.
|
|
A full deployment security pipeline: Jenkins builds, SonarQube for code quality, Trivy + OWASP Dependency-Check for vulnerability scanning, containerized and shipped to EKS with ArgoCD, monitored via Prometheus/Grafana — plus hardened EC2 provisioning with locked-down security groups and key-only SSH.
|
A professional-grade network security monitoring tool — live packet analysis with Scapy, intelligent alert deduplication that filters out ephemeral-port and broadcast noise, and PDF security reports with concrete mitigation commands attached to every finding.
|
|
A Flask platform for running controlled, ethical phishing-awareness campaigns for security teams — unique tracking tokens per recipient, a click-rate analytics dashboard, IP/user-agent capture, and SMTP-based delivery, built to train employees rather than attack them.
|
An offline-first Git security scanner. Bare-clones a repo and checks every branch, full commit history (including secrets that were committed and later deleted), GitHub Actions workflows for risky patterns like unpinned actions, and dependency-pinning hygiene — zero external calls beyond the initial clone.
|
| Project | What it does |
|---|---|
| AI Security Scanner for Python | Gemini-powered static vulnerability scanner for Python code |
| GitHub Finder · live demo | Vue app to search & compare GitHub profiles, generate shareable badge cards, and browse 35+ curated dev/AI learning resources |
| Blog Writer Crew | CrewAI multi-agent pipeline (research → draft → edit → social copy), powered by Gemini |
| AWS Security Monitoring System | CloudTrail + CloudWatch + SNS pipeline that alerts on secrets-access events |
| AWS Three-Tier Architecture | Classic three-tier web delivery pattern built on AWS |
| Networking Projects | Ongoing collection of hands-on network security builds — VLAN segmentation, DHCP snooping, attack simulation & mitigation on a pfSense/Kali homelab |
Open to Cloud Security Engineering, Security Architecture, SOC Analysis, and DevSecOps roles.