At Hamgad Security Services, I lead secure AWS landing-zone architecture across 15+ enterprise accounts, achieving 99.9% uptime while embedding Security Hub, GuardDuty, and AWS Config from day one.
I've reduced cloud costs by 40% through right-sizing, Reserved Instance planning, and CIS-aligned Terraform modules, while remediating 150+ IAM risks and enforcing KMS encryption across S3, EBS, and RDS. I also build Python-based automated alert triage and embed SAST, DAST, tfsec, and Checkov into CI/CD pipelines to reduce remediation time.
Previously at DOTWEB, I helped engineering squads eliminate long-lived credentials with OIDC in GitHub Actions, reduced critical vulnerability backlog by 60%+, and mentored engineers on secure delivery practices.
