Skip to content
View sunnyoncloud9's full-sized avatar
1 follower · 0 following

Block or report sunnyoncloud9

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
sunnyoncloud9/README.md

LinkedIn GitHub

🛡️ About Me

sunny = {
    "role"      : "Security Engineer",
    "focus"     : ["Detection Engineering", "AppSec", "DevSecOps", "AI Security"],
    "cloud"     : ["Azure", "AWS"],
    "languages" : ["Python", "KQL", "Bash"],
    "certs"     : ["CySA+", "Security+", "AZ-500", "AWS SAA-C03"],
    "building"  : "Security tools that solve real problems"
}

🔧 Tech Stack

Python Azure AWS GCP GitHub Actions Docker Kubernetes Terraform Ansible Jenkins Splunk Microsoft Sentinel CrowdStrike Burp Suite Nmap Wireshark

🚀 Projects

Project Description Stack
🛡️ DevSecOps Pipeline Full CI/CD security pipeline — SAST, SCA, secret scanning, container & IaC scanning with automated security gate Python, GitHub Actions, Trivy, Checkov
🤖 AI-SecOps Pipeline LLM security testing pipeline mapped to OWASP Top 10 for LLM Applications Python, Groq, GitHub Actions
🔍 ScanIQ AI-powered security scanner for web apps and network infrastructure with PDF reports Python, Groq, OWASP Top 10
☁️ Azure Sentinel Greenfield Production Sentinel deployment — KQL detection rules, SOAR playbook, MITRE ATT&CK coverage KQL, Azure, Logic Apps
🔐 TOTP MFA Microservice MFA microservice built from RFC 6238 cryptographic primitives — bcrypt, JWT, rate limiting Python, Flask, JWT
⚡ SIEM Alert Triage Engine Automated SIEM alert triage with MITRE ATT&CK mapping and incident report generation Python, Splunk

🏅 Certifications

CySA+ Security+ AZ-500 AWS SAA-C03

📊 GitHub Activity

GitHub Streak

Pinned Loading

  1. azure-sentinel-greenfield-build azure-sentinel-greenfield-build Public

    Greenfield Microsoft Sentinel deployment — detection engineering, SOAR automation, threat hunting, and MITRE ATT&CK coverage built from scratch.

    2

  2. siem-alert-triage-engine siem-alert-triage-engine Public

    Python-based SIEM alert triage automation with MITRE ATT&CK mapping and incident report generation

    Python

  3. ai-secops-pipeline ai-secops-pipeline Public

    AI-assisted security operations pipeline — ingests AWS security findings (GuardDuty, CloudTrail, Security Hub), triages with Amazon Bedrock + RAG, and routes through human-in-the-loop analyst appro…

    Python

  4. totp-mfa-microservice totp-mfa-microservice Public

    Custom MFA microservice with TOTP (RFC 6238) built from scratch — bcrypt password hashing, JWT sessions, rate limiting & brute force protection. Compatible with Google Authenticator & Authy.

    Python

  5. scaniq scaniq Public

    AI-powered security scanner for web applications and network infrastructure | Python | Groq | OWASP Top 10

    Python

  6. devsecops-pipeline devsecops-pipeline Public

    Security-integrated CI/CD pipeline with SAST, SCA, secret scanning, container & IaC scanning, and an automated security gate | GitHub Actions

    Python