I build cloud remediation workflows and AI runtime guardrails that turn risky inputs, findings, and model outputs into controlled, observable security decisions.
I build practical security workflows across AWS, Azure, GCP, Wiz, Terraform, Python, and SQL. My work turns cloud findings and AI runtime risks into repeatable controls: inspect the signal, enforce policy, route exceptions, and leave a useful audit trail.
This portfolio shows how I think as an engineer: not just identifying cloud risk, but designing systems that help teams respond faster while keeping control over production change.
Securing AI systems, AI-assisted security operations, threat analysis, and responsible AI governance, risk, and compliance.
Security architecture, identity, logging, monitoring, data protection, and incident response across AWS environments.
Resilient cloud design, networking, IAM, storage, compute, and cost-aware architecture foundations.
Infrastructure as code, reusable modules, state management, secure delivery patterns, and repeatable cloud provisioning.
A reference implementation that inspects prompts before model inference and screens responses before release. Policy templates detect prompt injection, jailbreak attempts, sensitive data, malicious URLs, and unsafe content, while Cloud Logging preserves evidence for tuning and investigation.
Explore the architecture →Control result to SNS, SQS, Lambda, Assume Role, customer-account action, and audit record.
02 Alert Notification PlaybooksValidate payloads, enrich context, route issues, and send clear messages to owners.
03 Wiz API and GraphQL AutomationQuery Wiz issues, map controls, update automation logic, and support scalable security operations.
04 Azure NSG Exposure RemediationDetect and remediate risky inbound NSG rules using source, port, priority, and rule intent.
05 Audit Logging and MetricsTrack decisions, exceptions, failures, and operational metrics for audit-ready reporting.
06 Terraform Security InfrastructurePrivate S3, CloudFront, ACM, Route 53, versioning, encryption, and deployment discipline.