- 🔐 Cybersecurity professional with 3+ years across DevSecOps, penetration testing, cloud/container security, SIEM operations, and UAV security research
- 🛠️ Architected a zero-downtime CI/CD security pipeline integrating 15+ tools (GitLeaks, TruffleHog, Semgrep, SonarQube, OWASP Dependency-Check, Trivy, SYFT, GRYPE, Hadolint, Checkov, OWASP ZAP, DefectDojo)
- 🚁 Currently leading funded research at ICFOSS on ROS 2 DDS vulnerabilities, Wi-Fi swarm attack surfaces, and MAVLink protocol security in UAV/autonomous systems
- ☁️ Skilled in AWS IAM/EC2/VPC security, Docker/Portainer, Wazuh SIEM with CIS benchmark integration, and Prometheus · Grafana · Loki observability
- 🎓 M.Sc. Cyber Forensics & Information Security, Madras University
- 📜 CEH V11 Certified | Pursuing CKS & AWS Security Specialty
- ✍️ I write about DevSecOps, Wazuh/SIEM hardening, and cloud/container security on Medium
- 🤝 Active in the open-source security community — 500+ professional connections, regularly engaging with the latest AppSec/Cloud/IaC research
- 🧩 Interested in AI-augmented offensive security — exploring how LLMs (OpenAI, Claude, Grok, local models) can accelerate vulnerability detection and reporting
- 🌱 Constantly experimenting with home-lab setups on Proxmox/KVM to simulate enterprise attack-defense scenarios before applying them in production
Research Assistant — ICFOSS (Mar 2026 – Present) Leading security research on UAV & autonomous systems: ROS 2 DDS attack surfaces (unauthenticated topic subscription, participant spoofing, multicast interception), Wi-Fi de-auth/spoofing on drone swarms, and MAVLink protocol attacks (component ID spoofing, heartbeat hijack, replay). Also performing penetration testing on gateways, web apps, and network infrastructure with CVSS-scored findings.
DevSecOps / CI-CD
Secret Scanning / SAST / SCA
Container & IaC Security
Offensive Security / DAST
SIEM & Observability
Cloud & Virtualization
Server & Network
UAV / IoT / OT Security
Scripting & Dev
Frameworks & Standards
- 🔗 Designed & deployed a full-lifecycle DevSecOps pipeline: Secret Scan → SAST → SCA → IaC Scan → Docker Build → SBOM + Container Scan → Signing → Policy Gate → Blue-Green Deployment (zero downtime) → DAST → Infra Scan → Vuln Management → SIEM → Alerting
- 🚁 First in the organization to map ROS 2 DDS and MAVLink attack surfaces to MITRE ATT&CK for Embedded/IoT
- 🕵️ Performed VAPT on ERPNext across 3 production deployments (ICFOSS, Kerala IT Mission, Frappe Cloud); responsibly disclosed multiple high-severity vulnerabilities
- 📊 Deployed Wazuh SIEM with custom SCA rules org-wide, achieving CIS benchmark compliance with real-time Grafana + Telegram alerting
- 🌾 Contributed to India's IoT-Enabled Smart Panchayat initiative — secured rural precision-agriculture infrastructure under PMKSY, a first-of-its-kind government IoT deployment in Kerala
- 🕸️ Ran full-scope VAPT engagements across 3 production ERPNext deployments spanning government and enterprise cloud environments
I write technical breakdowns on DevSecOps and security engineering over on Medium:
- 📘 DevOps Fundamentals: A Complete Beginner's Guide — CI/CD, IaC, GitOps, Agile & SDLC explained from the ground up
- 🔐 How to Change Wazuh Admin, Kibana Server, and API Passwords in Docker — hardening a real Wazuh Docker deployment step by step
| Area | Focus |
|---|---|
| ROS 2 / DDS | Unauthenticated topic subscription, participant spoofing, multicast interception, SROS2 & OMG DDS Security spec mitigations |
| Drone Swarm Wi-Fi | De-authentication, spoofing, MITM on inter-drone control channels |
| MAVLink | Component ID spoofing, heartbeat hijacking, replay attacks, MAVLink 2 signing adoption |
- 🔭 Currently working on: UAV/autonomous systems security research at ICFOSS
- 🌱 Currently leveling up: CKS (Kubernetes Security) & AWS Security Specialty
- 🤝 Open to collaborating on: DevSecOps pipeline design, drone/UAV security, and SIEM/threat detection projects
- 💬 Ask me about: CI/CD security automation, Wazuh, container security, or MAVLink/ROS 2 attack surfaces
- ⚙️ Fun fact: I've built one CI/CD pipeline that chains 15+ security tools into a single zero-downtime deployment gate — from secret scanning to SIEM alerting
- Certified Ethical Hacker V11 (CEH V11) — EC-Council
- Certified Penetration Tester — Red Team Hacker Academy
- Learn Ethical Hacking From Scratch — Udemy
- Pursuing: CKS (Kubernetes Security) · AWS Security Specialty
"Secure by design, resilient by default."