Skip to content
View aloffawy's full-sized avatar
  • England

Block or report aloffawy

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Please don't include any personal information such as legal names or email addresses. Maximum 100 characters, markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
aloffawy/README.md

Hi there, I'm Ameen Abdulrazaq πŸ‘‹

πŸ”’ DevSecOps & Cloud Security Professional | CISSP | CCSP | MCSA | Certified DevSecOps Professional


πŸ‘¨β€πŸ’» About Me

I am an experienced DevSecOps and Cloud Security professional with over 8 years of expertise in securing cloud infrastructure and embedding security into the development lifecycle. My experience spans various industries, where I have delivered robust security solutions that protect against ever-evolving cyber threats. I have a strong track record in integrating security best practices into DevOps workflows, performing security assessments, and ensuring continuous security compliance in cloud environments.

I thrive in roles where I can bring my skills in Azure, AWS, CI/CD security, and cloud architecture to enhance organizational security posture. Passionate about improving security operations and automating security controls, I’m constantly learning to stay ahead in the fast-paced world of cloud and security technologies.


πŸ”§ Technologies & Tools

DevOps & Cloud

Docker Kubernetes Azure AWS Terraform Ansible Chef GitHub GitLab Jenkins Python PowerShell

SecOps Tools

OWASP Snyk Veracode SonarQube Intruder Wfuzz OWASP ZAP Grafana Azure Sentinel Splunk AWS CloudTrail Prometheus


πŸ”’ Areas of Expertise

  • DevSecOps: Security integration in CI/CD pipelines, infrastructure as code (IaC), and continuous security testing.
  • Cloud Security: Azure and AWS platforms, security architecture reviews, and IAM (Identity and Access Management).
  • Vulnerability Management: SCA (Software Composition Analysis), SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing).
  • Security Operations: Incident response (IR), threat intelligence, monitoring and logging using Azure Sentinel, Splunk, CloudTrail, and more.
  • Penetration Testing: Security assessments of networks, cloud, and web applications with a focus on identifying and remediating vulnerabilities.

πŸ† Certifications

  • Certified DevSecOps Professional (CDP)
  • Certified Cloud Security Professional (CCSP)
  • Certified Information System Security Professional (CISSP)
  • AWS Certified Security Speciality
  • AWS Certified Solutions Architect - Associate
  • Microsoft Certified DevOps Engineer Expert (AZ-400)
  • Microsoft Certified Azure Security Engineer Associate (AZ-500)
  • Microsoft Certified Security Administrator Associate (MS-500)
  • Microsoft Certified Azure Administrator (AZ-104)
  • 3x CCNA (Routing & Switching, Security, Wireless)

🌱 What I'm currently learning

  • Advanced cloud security architectures, focusing on multi-cloud environments and Zero Trust frameworks.
  • Intergrating security tools into CI/CD pipline.

πŸ“« Let's Connect!

LinkedIn X (formerly Twitter) Email


πŸ’‘ Fun Fact:

I'm an advocate for secure coding practices and love playing football during my free time! Cheers!!

Pinned Loading

  1. AZ-104-MicrosoftAzureAdministrator AZ-104-MicrosoftAzureAdministrator Public

    Forked from MicrosoftLearning/AZ-104-MicrosoftAzureAdministrator

    AZ-104 Microsoft Azure Administrator

    PowerShell

  2. AZ500-AzureSecurityTechnologies AZ500-AzureSecurityTechnologies Public

    Forked from MicrosoftLearning/AZ500-AzureSecurityTechnologies

    Microsoft Azure Security Technologies

    Bicep

  3. DevSecOps-Project-Netflix DevSecOps-Project-Netflix Public

    Forked from N4si/DevSecOps-Project

    DevSecOps Project to setup Netflix clone on AWS using CICD, Security, Monitoring and GitOps

    TypeScript 1 2

  4. django.nv django.nv Public

  5. microsoft-teams-emergency-operations-center microsoft-teams-emergency-operations-center Public

    Forked from OfficeDev/microsoft-teams-emergency-operations-center

    The Microsoft Teams Emergency Operations Center (TEOC) solution template leverages the power of the Microsoft 365 platform to centralize incident response, information sharing and field communicati…

    TypeScript

  6. python-demoapp python-demoapp Public

    Forked from benc-uk/python-demoapp

    Simple Python Flask web application designed for running in containers for demos

    JavaScript