Skip to content
View sonupreetam's full-sized avatar

Organizations

@complytime

Block or report sonupreetam

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
sonupreetam/README.md

Welcome to My GitHub Page! 👋

About Me

Previously, I worked as a Senior Cloud Security Researcher, focusing on Kubernetes and cloud-native security. My work covered:

  • Container Security: Implementing secure practices for container orchestration environments.
  • Vulnerability Management: Identifying, analyzing, and mitigating security vulnerabilities.
  • Compliance Automation: Streamlining compliance workflows to meet industry standards.
  • Detection Pipelines: Building robust detection pipelines for identifying real-world attack vectors.
  • Risk Assessments: Conducting SBOM/CVE-based risk assessments to manage security risk.

Notable Contributions:

  • Financial Technologies: Enhancing security measures especially fraud detection management in fintech applications.
  • Red Teaming: Engaging in simulated attacks to identify security weaknesses.
  • Threat Modelling: Employing frameworks like MITRE ATT&CK and STRIDE for robust threat analysis.
  • Open Source Tools: Leveraging tools such as Caldera, OpenCTI, and MISP to drive security insights.

Education

🎓 Master's in Cybersecurity
My academic background in cybersecurity has equipped me with the foundational knowledge and practical skills needed for specialized roles in the field.

What I'm Currently Working On

  • Exploring the latest advancements in cloud-native security solutions.
  • Collaborating with open-source communities to improve security tooling.
  • Developing new models for threat detection and response.
  • Working on compliance as code models.
  • Research on insider risks and osint tools as side projects.
  • End to end Supply chain security.
  • Web development and CICD pipeline management.

## Get in Touch Feel free to reach out if you’re interested in discussing cloud security, collaborating on projects, or just want to connect!

🔗 LinkedIn Profile
🔗 Blog

Let’s secure the future together! 🌐

Pinned Loading

  1. gemara gemara Public

    Forked from gemaraproj/gemara

    Minimizing rework for governance activities.

    Go

  2. complybeacon complybeacon Public

    Forked from complytime/complytime-collector-components

    A policy-driven observability toolkit for compliance evidence collection

    Go