Areas of Expertise
Explore my diverse skill set in cybersecurity and cloud technologies.
I specialize in Firewall and Wireless Security, Container Security, Identity & Access Management, and Security Information and Event Management (SIEM). With experience in cloud platforms like AWS, automation with Bash, Python, and JavaScript, and proficiency in DevSecOps and Infrastructure as Code (IaC), I offer innovative and secure solutions for complex challenges.
Kubernetes Security
Google Cloud Platform Security
Amazon Security
NodeJS
Mobile Security
BurpSuite
Network Security
Cloud Security
Azure Security
DevOps Security
Source Code Security
Web App Security
Python
JavaScript
BASH
AD Security
Linux Security
Firewall Security
Docker Security
IAM
Kibana
API Security
Grafana
Vulnerability Assessment and Penetration Testing
✨ Extensive hands-on experience in Network & Infrastructure Security.
✨ Comprehensive knowledge of Application Security across Web, Thick, and Thin Clients.
✨Skilled in Dynamic & Static Application Security Testing (DAST & SAST).
✨ Proficient in Manual Code Review (Node.js, Python, Bash, JavaScript).
✨ Expertise in API Security, focusing on OWASP's Top 10 vulnerabilities and Business Logic Flaws.
✨ Specialized in Mobile Security for both Android and iOS platforms.
✨ Experienced in Active Directory Implementation, Configuration, and Security.
✨ In-depth knowledge of Linux Security for Host Machines and Servers.
✨ Proficient in Firewall Security Assessment (SonicWall, Fortinet, Sophos, pfSense).
✨ Skilled in Wireless Security.
Container Security
✨ Expertise in Docker Security.
✨ Proficient in GKE Security.
✨ Skilled in Microsoft AKS Security.
✨ Skilled in Amazon EKS Security.
Identity & Access Management (IAM)
✨ Worked with IAM solutions such as Secureden and Cloudflare.
✨ ​Experienced in Data Loss Prevention (DLP) Configuration.
Advanced Security Techniques
✨ Expertise in Lateral Movement Techniques and Privilege Escalation on Active Directory and Linux Servers.
✨ Proficient in Red and Blue Teaming exercises.
✨ Experienced in Digital Forensics and OSINT (Open Source Intelligence).
Cloud Platforms Security
✨ Extensive experience with Amazon Web Services (AWS).
✨ Proficient in Cloud Security, with expertise in AWS and Azure & GCP Security.
✨ Secure Cloud Configuration.
DevSecOps & Infrastructure as Code (IaC)
✨ Knowledgeable in DevSecOps practices.
✨ Proficient in Infrastructure as Code tools such as Ansible and Terraform.
Security Information and Event Management (SIEM) & Extended Detection and Response (XDR)
✨ Advanced implementation of Wazuh with Kibana and Elastic Search, including Policy and XDR Configuration.
✨ Experienced in Splunk.
✨ Skilled in utilizing Grafana for monitoring and analytics.
Industry Tools
✨ Hands-on experience with industry-standard tools such as Nessus, Qualys, Regine, MobSF, SonarQube, CheckMarx, Blackduck, and Snyk.