I built a Dockerized Flask application pipeline in GitHub Actions with security gates for secrets, code, dependencies, containers, and DAST. I integrated Gitleaks, Semgrep, CodeQL, pip-audit, Dependabot, Trivy, and OWASP ZAP, and added Docker non-root hardening and remediation documentation.
For my AWS/GCP Terraform project, I created cloud security baselines and used Checkov through GitHub Actions for validation, CI gate enforcement, and separate cloud reports. I also built a Python pipeline that analyzes AWS CloudTrail logs for suspicious activity using Isolation Forest.
At Magdi Yacoub Heart Foundation, I supported hospital systems and infrastructure across Windows and Linux, monitored alerts with SolarWinds and Kaspersky Security Center, and troubleshot network and connectivity issues. I'm currently pursuing an MSc in Information Security at Queen's University.
