Profile
I'm a cloud security professional pursuing the Erasmus Mundus MSc in Applied Cybersecurity (CyberMACS — Kadir Has University, SRH University Germany, UKIM North Macedonia), selected among the top 15 applicants for the EU's prestigious Erasmus Mundus scholarship.
I bring 2+ years of hands-on AWS production experience managing live infrastructure, a strong Python automation background, and growing expertise in cloud security architecture — practical work with AWS security services (IAM, CloudTrail, CloudWatch, Security Hub, GuardDuty), infrastructure as code, and security scanning, plus foundational knowledge of GDPR and NIST CSF.
I'm also deeply invested in AI workflows and agents — I build with LLMs daily and believe the future of cloud operations is automation. Having secured my cloud security internship, I'm eager to discuss what's next: remote part-time cloud security roles starting January 2027.
What I work with
- Least-privilege IAM design & auditing
- Serverless architecture on AWS
- IaC with CloudFormation / SAM + Checkov scanning
- CI/CD pipelines with OIDC — no static credentials
- Python / boto3 automation & LLM integration
- GDPR · NIST CSF · ISO 27001 foundations
Experience
- Secured and administered AWS cloud infrastructure (EC2, S3, Lambda, RDS, IAM, CloudTrail, CloudWatch), enforcing least-privilege IAM policies and automating compliance checks
- Built Python automation pipelines integrating LLMs (Claude, GPT) to detect anomalous patterns in accounting and sales data, automating reporting and alert workflows
- Managed on-premises and cloud infrastructure reliability (99%+ uptime), implementing automated backup and monitoring strategies aligned with ISO 27001 availability principles
- Administered SAP Business One and Microsoft SQL Server, designing stored procedures and triggers for data-driven decision-making across business units
- Led IT procurement and vendor management, delivering projects within budget and timeline
- Developed a cross-platform mobile authentication application (Flutter SDK) implementing secure credential flows, OTP-based password resets, and data protection principles
- Automated network topology documentation using Python scripting, producing WAN/LAN infrastructure inventories supporting security baseline assessments
- Deployed and hardened a Moodle LMS instance with access-controlled sub-domain configuration, enabling secure online education for 200+ customers
- Diagnosed and resolved LAN/WAN connectivity issues; performed hardware maintenance improving lab performance
- Developed a Python (PyQt) GUI application and a prototype Augmented Reality mobile app using Unity and Vuforia SDK
Featured Work
A security-hardened, fully serverless platform on AWS — 100% infrastructure as code, continuously tested, security-scanned, and deployed by CI/CD. The live telemetry panel at the top of this page is served by this architecture.
- Hardened delivery: S3 + CloudFront with Origin Access Control — the bucket is fully private (direct S3 access returns 403), HTTPS/TLS-only
- Visitor analytics API: API Gateway → Lambda (Python / boto3) → DynamoDB, with unique-visitor deduplication via a 24-hour-TTL IP table — no permanent tracking
- Live observability: a read-only metrics Lambda merges DynamoDB totals with CloudWatch
GetMetricDatato power the real-time dashboard in the hero - DevSecOps pipeline: GitHub Actions runs 13 pytest/moto tests and a Checkov IaC security scan (SARIF → GitHub Security tab), then auto-deploys — authenticated via OIDC with zero static AWS credentials
- Least-privilege IAM throughout: per-function scoped roles; the CI deploy role holds IAM rights over only the stack's two named Lambda roles; the full audit is published as SECURITY.md
- Audit trail: CloudFront access logs shipped to S3 with a 30-day lifecycle; S3 versioning + lifecycle declared as code
- Flask / LangChain web app with MySQL authentication, containerised via Docker
- Implemented token-based session control and input validation as core security controls
Certifications
Education
Full Erasmus Mundus scholarship (EU-funded) · Coursework: Network Security, Cryptography, ML for Security, Data Analysis, Penetration Testing
Full academic scholarship · Graduation grade: 92/100 · Thesis: Marketing mobile app "Fe y Alegría" — Flutter, Firestore, Firebase Auth, Scrum/GitLab