About
Cloud Security Engineer with around 3 years of hands-on experience in cloud security, vulnerability response, security monitoring, and remediation tracking across AWS, Azure, GCP, and OCI. Proficient in Wiz, Prisma Cloud (CSPM/CWPP), CI/CD security (GitLab), and SAST, DAST, SCA, and SBOM analysis, with experience in AI Security Posture Management (AI-SPM) covering AI model and agent security, OWASP LLM Top 10, and general OWASP Top 10. Conducts security design reviews, threat modelling, and penetration testing coordination, mapping investigations to attacker tradecraft (MITRE ATT&CK) via PCAP and network flow log analysis. Hands-on production use of Microsoft Sentinel, Defender, Entra ID, and Purview. Strong grasp of ISO 27001, Cyber Essentials, PCI-DSS, NIST, and GDPR, with maturity assessments, control gap analysis, and TPRM experience and audit evidence preparation. MSc Cyber Security (Distinction), Coventry University. Right to work in the UK.
Skills & Expertise (75)
Work Experience
Cloud Security Engineer
Gradence Global
Jul 2025 - Jun 2026
Monitored and analysed Wiz cloud security alerts across AWS, Azure, GCP, and OCI, identifying misconfigurations, exposed resources, policy violations, and AI security risks. Triaged cloud and AI security findings using Wiz AI-SPM, covering OWASP LLM Top 10 vulnerabilities, AI misconfiguration detection, and AI attack path analysis. Conducted security design reviews, threat modelling, and penetration testing coordination; used cloud/web application firewalls and API security controls; hands-on production use of Microsoft Sentinel, Defender, Entra ID, and Purview. Mapped incidents to attacker tradecraft (MITRE ATT&CK) via PCAP and network flow log analysis; drove cloud security improvements through IAM risk analysis, remediation tracking, audit evidence collection, and GitLab CI/CD security integration.
Cyber Security Specialist
BeScience STEM
Apr 2025 - Jun 2025
Led Cyber Essentials readiness activities by conducting gap analysis across access control, device security, and data protection controls, supporting remediation actions that improved overall compliance readiness. Delivered risk, maturity, and control gap assessments across systems, data handling processes, and user access, documenting key risks and recommending practical mitigation strategies. Prepared security documentation, policy improvements, and evidence aligned with compliance workflows, audit readiness, and incident-prevention practices, applying general OWASP and NIST principles.
Cloud Security Analyst
AU Small Finance Bank
Mar 2023 - Apr 2024
Used Prisma Cloud (CSPM) alongside AWS-native services including IAM, VPC, CloudTrail, Config, GuardDuty, and WAF to monitor security alerts, misconfigurations, and compliance findings across AWS, Azure, and GCP in a regulated banking environment. Participated in a Wiz POC and drove the end-to-end migration from Prisma Cloud to Wiz, coordinating vulnerability triage, DAST, remediation tracking, escalation, and closure across cloud, infrastructure, DevOps, and application teams. Designed hybrid network connectivity (Direct Connect, VPN, Transit Gateway); applied cryptography, SSL/TLS, and PKI; conducted TPRM processes. Supported AI security initiatives involving Amazon SageMaker and Amazon Bedrock, contributed to SBOM-based vulnerability analysis, and maintained security governance aligned with ISO 27001, NIST, GDPR, PCI-DSS, and RBI guidelines, including audit evidence preparation and access control reviews.
SOC Analyst
Aislyn Technologies Pvt Ltd
May 2022 - Nov 2022
Performed initial security alert triage, validation, and escalation using documented SOC procedures within a 24/7 SOC; gained hands-on exposure to Windows, Linux, networking fundamentals, phishing, malware, and common attack techniques.
Education
MSc in Cyber Security, 1:1 - Coventry University
2024 - 2025 · Afghanistan
B.E in Computer Science & Engineering - Visvesvaraya Technological University
2019 - 2023 · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Availability Details
Visa Status
Citizen
Relocation
Open to Relocation
Skills (75)
Click a skill to find developers with the same skill
