Open to opportunities

Toheeb Husain

@toheebhusain

Message

I secure cloud-native systems through DevSecOps, detection engineering, and automated governance.

United Kingdom

Message

What I'm looking for

I'm looking to secure cloud-native applications and infrastructure through DevSecOps, detection engineering, automated governance, and practical threat intelligence. I value hands-on teams where I can reduce risk, contribute to open source, and keep building impactful security solutions.

I've delivered cloud security engineering at Amdari across AWS and Azure, designing IAM and Azure RBAC models, building Microsoft Sentinel detections, and deploying Terraform-managed infrastructure with OIDC-based CI/CD controls. My work reduced admin onboarding to under five minutes while helping limit permission creep.

I've secured Kubernetes workloads with OPA Gatekeeper, Falco, HashiCorp Vault, and Cosign, and remediated 40+ vulnerabilities in a cloud-native banking platform through SecureFlow. I also contribute to SigmaHQ, where my DNS exfiltration detection rule was merged into the global repository, and I bring threat intelligence experience across phishing analysis, OSINT, IOC analysis, and MITRE ATT&CK.

Experience

Work history, roles, and key accomplishments

Current

Cloud Security Analyst Consultant

Current

Amdari

Nov 2025 - Present (9 months)

Delivered cloud security engineering across AWS and Azure, including IAM design, SIEM/SOAR, IaC governance, and security automation. Designed Microsoft Entra ID and Azure RBAC models enforcing least privilege, and built a Microsoft Sentinel PoC with KQL detections for privilege escalation and suspicious sign-ins.