At UniAcco, I automate AWS posture reviews and threat detection for production SaaS platforms. I use ScoutSuite to review cloud configurations and built detection workflows with CloudTrail, Athena, Lambda, and S3.
I assess EKS security across 20 namespaces and deployed Falco runtime detections with alerts routed to OpenSearch. I also scheduled Kubescape posture checks aligned with NSA/CISA and MITRE guidance.
For preventive application security, I created 50 custom Semgrep rules in mandatory GitHub Actions pull-request gates and set up recurring SonarQube analysis. I’ve also validated more than 20 web/API security issues and worked with engineers on root causes and remediation.
During production security incidents, including DDoS and redirect attacks, I developed OpenSearch/ELK observability across 800+ APIs, contributing to approximately 60% faster incident triage. My projects include CyberCLI, a Python security reconnaissance and VAPT platform, and first-author research on an IoT sinkhole-attack IDS.
