Alazar Abebaw
Alazar is Cyber security Enthusiastic with the urge to grow and learn new technologies. I am proficient with programming language knowledge (Python, Golang, Java, and JavaScript) and DevOps tools (Docker, Terraform CI/CD, Github, AWS, Azure-EC2, S3, Lambda). I have been studying security and cloud computing for the past two years, where I got hands-on experience and a deep understanding of cloud security.
I have finished my master's thesis on "Cloud IoT application security footprint visibility" and studying for Practical Network Penetration Testing (https://certifications.tcm-sec.com/pnpt/) exam. I am also learning Active Directory, Web, and Wireless penetration testing as part of the preparation for the exam - The learning diary is found at https://github.com/alazaralemayehu/tcm-security-notes.
I am currently working as DevSecOps engineer in WithSecure. I am proficient in different programming languages and designing secure cloud applications.
REVIEWS FROM CLIENTS
- Engineered and optimized AWS cloud infrastructure using AWS CDK and Python, significantly reducing processing costs by 5% while e...
- Engineered and optimized AWS cloud infrastructure using AWS CDK and Python, significantly reducing processing costs by 5% while enhancing efficiency and financial savings.
- Led the development and deployment of secure CI/CD pipelines, ensuring robust security measures and fostering a culture of security awareness throughout the product lifecycle.
- Drove the product evolution from POC to a marketable Cloud Detection and Response SaaS solution for AWS, Azure, and M365, demonstrating strong security principles and facilitating engaging team sessions.
- Performed comprehensive threat modeling and applied security best practices, playing a pivotal role in reducing vulnerabilities and promoting a secure development environment.
- Due to time-zone differences, I was able to work in both companies (Kone Oyj and VTF) to further solidify my security knowledge.<...
- Due to time-zone differences, I was able to work in both companies (Kone Oyj and VTF) to further solidify my security knowledge.
- Prepared Training material about OSINT and Android security which was shared internally via presentation/lunch & learns etc, which improved general security knowledge of others in my organization.
- Attended Open-Source Intelligence and “Foundation of Operationalizing and MITRE Attack.”, which was my first introduction to MITRE. This enabled me to further my knowledge of attacks and how they map to Techniques, Tactics and Procedures.
- Developed an automated active scanning tool and assessed more than 100 hosts on AWS server.
- Implemented a graph theory &a...
- Developed an automated active scanning tool and assessed more than 100 hosts on AWS server.
- Implemented a graph theory & rule-based engine to detect anomalies from endpoints using AWS services.
- Designed integration methodology to deploy monitoring tools, mentioned above, within the production environment to reduce identified security flaws/issues.