Summary
Highly analytical and results-driven Cloud Security Engineer with 6 years of experience specializing in AWS and Azure environments. Proven ability to design, implement, and manage robust security solutions, enhancing cloud infrastructure resilience and ensuring compliance with industry standards. Expert in IAM, network security, data protection, and automating security processes to minimize risk and optimize operational efficiency.
Experience
- Architected and implemented security controls for AWS serverless applications, reducing potential vulnerabilities by 35% across 5 critical services.
- Developed and maintained CI/CD security pipelines using Terraform and GitHub Actions, automating security checks for over 100 microservices.
- Led incident response for major cloud security events, minimizing downtime by 25% and ensuring rapid recovery and post-incident analysis.
- Implemented endpoint detection and response (EDR) solutions across 2,000+ cloud instances, enhancing threat visibility by 40%.
- Developed Python scripts to automate security compliance checks against SOC 2 and PCI DSS standards, reducing manual audit efforts by 30 hours per month.
- Administered Azure Security Center and AWS Security Hub, aggregating security alerts and reducing critical alert response time by 15%.
- Configured and managed WAF rules and DDoS protection for public-facing applications, mitigating over 50 malicious attacks per week.
Projects
- Developed a Python-based tool leveraging AWS Lambda and Boto3 to automatically scan S3 buckets and EC2 instances for common misconfigurations.
- Integrated with Slack to push real-time alerts for identified vulnerabilities, reducing detection time by 70% compared to manual checks.
- Created a command-line tool in Python that generates least-privilege AWS IAM policies based on service access patterns.
- Improved security posture by providing developers with compliant and minimal privilege policies, reducing over-provisioned permissions by 45%.
- Designed and implemented a cost-effective serverless architecture using AWS Kinesis, Lambda, and S3 for centralized security log collection and processing.
- Enabled real-time streaming of security events to a Splunk SIEM, enhancing anomaly detection capabilities and reducing log analysis latency by 60%.
Education
- Specialized in Cloud Security Architecture and Incident Response.
- Graduated with a 3.8/4.0 GPA, focusing on securing distributed systems.
- Concentrated in System Security and Networking.
- Awarded Dean's List for 4 semesters for academic excellence.





