Onaefe Sefia

I’m a cloud security professional focused on building practical defenses that prevent misconfiguration, detect threats at runtime, and automate remediation. I deliver security tooling end-to-end, from infrastructure provisioning to detection workflows.

In AWS, I’ve provisioned secure environments with Terraform—covering core networking and KMS, plus logging and security services like GuardDuty, Security Hub, and CloudTrail. I’ve also built CI safeguards with GitHub Actions to run IaC scanning (Checkov and tfsec) so insecure changes don’t make it into production.

I also develop detection and breach-intelligence pipelines: serverless, event-driven systems using Lambda, EventBridge, DynamoDB, and encryption with KMS. I’ve implemented race-condition-safe duplicate detection and hardened workflows with least-privilege IAM, dead-letter queues, and multi-region auditing.

To round out defense in depth, I secure containers and Kubernetes by enforcing RBAC and NetworkPolicy, deploying Falco for runtime threat detection, and using Trivy for image vulnerability scanning. I bring this same security mindset into operations through hands-on support work and vulnerability remediation across endpoints and networks.