Open to opportunities

Berinyuy Farash

@berinyuyfarash

Message

DevSecOps Engineer with expertise in cloud security and automation.

Bangladesh

Message

What I'm looking for

I am looking for a role that fosters growth in cloud security and DevSecOps, with a focus on innovative projects and a collaborative team environment.

I am a dedicated DevSecOps Engineer with hands-on experience in integrating security into CI/CD pipelines, automating security scans, and implementing cloud security best practices. My passion lies in shifting security left and ensuring compliance with industry standards, which I have demonstrated through various projects and internships.

Currently, I am an intern at CyberAgoge, where I have successfully implemented cloud security best practices on AWS, enhancing compliance with NIST 800-53. I have designed Infrastructure as Code (IaC) security policies using Terraform Compliance and integrated tools like CodeQL and Trivy into CI/CD pipelines to identify security issues early in development. My commitment to security is further reflected in my active contributions to open-source security projects and participation in security workshops.

Experience

Work history, roles, and key accomplishments

Current

DevSecOps Intern

Current

CyberAgoge

Apr 2023 - Present (2 years 1 month)

As a DevSecOps Intern at CyberAgoge, I implemented cloud security best practices on AWS, enhancing compliance with NIST 800-53. I designed IaC security policies using Terraform Compliance and integrated security tools like CodeQL and Trivy into CI/CD pipelines to identify security issues early in development.

AWS CodeQl Trivy NIST 800 53 CI CD GitHub Actions Security Best Practices Infrastructure as Code Cloud Security

Current

DevSecOps Intern

Current

CyberAgoge

Apr 2023 - Present (2 years 1 month)

As a DevSecOps Intern at CyberAgoge, I implemented cloud security best practices on AWS, enhancing compliance with NIST 800-53. I designed IaC security policies using Terraform Compliance and integrated CodeQL and Trivy into CI/CD pipelines to identify security issues early in development.

AWS CodeQl Trivy NIST 800 53 CI CD Cloud Security Infrastructure as Code Security Best Practices Vulnerability Management

Education

Degrees, certifications, and relevant coursework

Islamic University of Technology

Computer Science and Engineering

Activities and societies: Active contributor to open-source security projects and DevSecOps research. Regularly participate in security workshops and TryHackMe labs.

Studied Computer Science and Engineering, focusing on the integration of security into software development and DevOps practices.