Security Analyst & Engineer focusing on Incident Response and Cloud Security.
I am a Security Engineer who doesn’t trust assumptions. I build and break systems, then automate the guardrails: detections, incident response, and secure cloud architectures. My work spans AWS/GCP IAM sanity checks, log pipelines (Splunk + Elastic), PCAP threat hunting with Zeek/Suricata, and rule engineering (YARA/Sigma).
Open source and Proprietary projects and contributions. Here are a few highlights.
Cross-Cloud Role Sanity Checker is a security-focused utility designed to validate AWS IAM roles and GCP service accounts before initiating cross-cloud data transfers — such as AWS DataSync operations targeting GCP.
Log ingestion, detections, attack steps, queries and dashboards following simulated attacks on Windows 10 virtual machine.
Analyzed multiple PCAP files to identify malicious activity such as ransomware, beaconing etc. and wrote Suricata signatures to catch them.
Identified multiple malware families, developed detections to successfully identify malicious files and activity within devices.
Selected findings, write-ups, and vendor advisories.
Unreleased writeup pending approval!
Previous roles, timelines, and highlights from recent engagements.
Degrees and programs that shaped my technical foundation.
Academic writings and thoughts on security, Cloud Infrastructure, and engineering craft.
Practical benefits of ML algorithms when used in AWS Threat Hunting workflows.
Read morePractical Implementation and Benefits of Phased Migration towards PQC
Read more