DevOps & Cyber Security Engineer

Apply the CIA Triad, risk assessment, STRIDE threat modelling and MITRE ATT&CK fundamentals.

Use CIS Benchmarks, firewalls, service hardening, password policies and disk encryption.

Write safe Bash automation with clear error handling, exit codes and recovery behaviour.

Understand container architecture, namespaces, cgroups, multi-stage builds and secure practices.

Use GitHub Actions with SAST, dependency scanning, secret detection and vulnerability blocking.

Create reproducible environments with declarative infrastructure, state management and locking.

Apply AWS security, shared responsibility, secure IAM and cloud configuration auditing.

Use least privilege, OAuth2, OIDC, MFA, conditional access and Zero Trust principles.

Deploy microservices using Pods, Deployments, Services and Ingress.

Apply RBAC, network policies, pod security standards, health probes and self-healing patterns.

Use Prometheus, Grafana, centralised logging, alerts and security-focused threat detection.

Explore OWASP Top 10, reconnaissance, authentication weaknesses, Burp Suite and OWASP ZAP.

Follow the NIST response lifecycle, investigate incidents and document lessons learned.

Combine Terraform, Kubernetes, secure CI/CD, monitoring and live incident debugging in one capstone.