🔒 Security Engineer | 🇩🇪 Living in Germany 🚀 Specializing in Application Security, DevSecOps, and Cloud Security
I'm a security-focused engineer passionate about building and securing modern applications across web, mobile, and cloud platforms. With hands-on experience in automating security controls and integrating them into CI/CD workflows, I help teams shift security left without compromising speed.
I'm currently working as a DevSecOps Engineer at Nexontis and actively contributing to sec-m8 — a project focused on practical security automation.
- 🐍 Python
- 🖥️ Bash
- 🐳 Docker
- ☸️ Kubernetes
- ☁️ Azure
- ☁️ Cloudflare
- ☁️ SAP BTP
- 🔧 GitLab CI/CD
- 🔧 Bitbucket CI/CD
- 🔍 SAST / DAST
- 🕵️ Secret Scanning
- 🧪 Penetration Testing
- 📊 Threat Modeling
- 🛠️ DevSecOps Practices
- 🧪 Secure Design
- 🧩 SAP Security Concepts
- 📧 Email: hojjat.sajjadinia@nexontis.com
- 💼 LinkedIn: linkedin.com/in/hojjatsajjadinia
- ✍️ Medium: medium.com/@hojjatsajjadinia
- 🔐 sec-m8: Security automation tools and integrations
- 🧪 AndRoPass: Tool to check the strength of Android root and emulator detection
- 📵 XposedFrameworkOffline: Xposed Installer and Framework for offline use contains Android 5.0 to 8.0 support.
- 🌩️ OPA-Security-Rules: A series of OPA rules for the static analysis of Docker and Kubernetes configuration files, aimed at enhancing security.
“Security is not a checklist. It's a mindset.”
Thanks for visiting my profile! Feel free to connect — always open to collaborations around secure DevOps, cloud-native security, and open-source tools.