Open to opportunities

Faizan-ur-rehman khokhar

@faizan-ur-rehmankhok

Message

Cybersecurity & DevSecOps engineer building secure cloud infrastructure and VAPT-driven remediation.

Pakistan

Message

What I'm looking for

I’m open to fully remote DevOps, DevSecOps, and security engineering roles across global time zones—where I can build secure cloud infrastructure, run VAPT, and deploy security monitoring and CI/CD automation.

I’m a CEH-certified Cybersecurity and DevSecOps engineer with 3+ years of hands-on experience in security assessments and penetration testing across web, network, and Android, plus building secure cloud infrastructure. I focus on turning findings into remediation by working directly with development teams, documenting vulnerabilities and attack paths, and supporting secure system design.

In my roles, I deploy and manage security and monitoring platforms such as Wazuh, ELK, Prometheus, and Grafana, while also setting up incident visibility and threat detection workflows. I’ve built multi-cloud environments using Azure, AWS, Hetzner, and UpCloud—integrating IAM/Entra ID, VPN mesh (Tailscale), and security operations—along with secure CI/CD pipelines and automation using Git, GitHub, Bash, Python, and n8n, including ISO/IEC 27001 audit support.

Experience

Work history, roles, and key accomplishments

Current

Lead DevOps & DevSecOps Eng

Current

Clin Sarlu - Chrono-Sign

Aug 2025 - Present (11 months)

Deployed multi-cloud K3s infrastructure across Hetzner, UpCloud, and AWS, including production, development, and disaster-recovery clusters. Set up SIEM/monitoring (Wazuh, Prometheus, Grafana, ELK) and supported ISO/IEC 27001 compliance with audit evidence and security architecture.

K3s Kubernetes Hetzner UpCloud AWS Multi Cloud Architecture Longhorn Wazuh Threat Detection Prometheus Grafana ELK Stack OpenLDAP ISO 27001 Audit Evidence CI CD Git GitHub

Current

Co-Founder & Technical Lead

Current

CybeCloud

Jun 2025 - Present (1 year 1 month)

Co-founded a DevOps and DevSecOps education and applied engineering initiative. Designed and delivered hands-on training covering Docker, Kubernetes, CI/CD pipelines, secure infrastructure, and security monitoring.

DevOps DevSecOps Security Education Docker Kubernetes CI CD Pipelines Secure Infrastructure Security Monitoring

Current

Cybersecurity & DevSecOps Engineer

Current

ZettaByte

Aug 2023 - Present (2 years 11 months)

Performed VAPT across web applications, networks, and Android apps and worked with development teams on remediation. Deployed and managed security monitoring and observability tools (Wazuh, ELK, Prometheus, Grafana) and built DevOps workflows and automated deployments.

VAPT Intern

National Center of Cyber Security

Jun 2022 - Aug 2023 (1 year 2 months)

Conducted vulnerability assessments of applications, systems, and networks, assessing severity based on criticality and exploitation scenarios. Produced vulnerability reports with risk ratings and recommended mitigations, working with developers and admins toward resolution.

Vulnerability Assessment Risk Assessment Vulnerability Reports