Security Trainee · Castellum Labs · Hyderabad, India
I build systems that catch attackers — SIEM pipelines, detection labs, and cloud security on AWS. 2 years hands-on experience including 5 months professional SOC operations.
Background
I'm a cybersecurity practitioner focused on Blue Team operations, detection engineering, and AWS cloud security. I build real systems — SIEM pipelines, detection labs, and cloud infrastructure — and document everything on GitHub and YouTube.
My work spans SIEM engineering with Splunk, Elastic, and OpenSearch, detection rules aligned with MITRE ATT&CK, and cloud security automation on AWS. I've expanded into GCP, HashiCorp Vault, Terraform, and Ansible.
TryHackMe Top 1% globally with a 350+ day streak and 252 completed rooms — consistently practicing real-world attack and defence scenarios every day.
Log pipeline engineering, cloud security monitoring, and DevSecOps integration across AWS infrastructure.
SOC L1/L2 monitoring, alert triage, IOC analysis, log-based threat detection. Built OpenSearch dashboards and Grafana observability.
Expertise
Two core disciplines — security operations and cloud infrastructure. I also support DevOps teams with CI/CD, containers, and IaC.
Threat detection, incident investigation, and adversary simulation aligned with MITRE ATT&CK and Cyber Kill Chain.
Secure cloud architecture, IAM hardening, GuardDuty, secrets management — on AWS and GCP.
Work
Real-world projects built from scratch — each with full documentation and most with a walkthrough video.
End-to-end secure CI/CD pipeline: GitHub → Jenkins → SonarQube (SAST) → Trivy (container scan) → Docker → AWS ECR → ECS Fargate → ALB. Full Infrastructure as Code with Terraform. SBOM generation, OWASP ZAP DAST, secrets management with Vault.
GUI-based Logstash config builder on production AWS. Route 53 → CloudFront → ALB → ECS Fargate (private subnets), multi-AZ, ECR, CloudWatch Alarms, Secrets Manager.
Production-style HA: ALB → Auto Scaling EC2 (private) → Multi-AZ RDS MySQL. Fully provisioned as IaC. Secured with IAM roles, Secrets Manager, SSM — no SSH keys.
Two-phase security assessment: exploited misconfigured SGs via Nmap + CALDERA, then redesigned with ALB, private subnets, and least-privilege. Mapped to MITRE ATT&CK and D3FEND.
Automated AWS scanner detecting IAM and S3 misconfigs with HIGH/MEDIUM/LOW risk scoring. Lambda + EventBridge + SNS alerts + Flask dashboard.
Automated CI/CD and disaster recovery for a Flask app using GitHub, Jenkins, Docker, and Nginx. Health checks, backups, rollback, and DR validation.
Content
Hands-on walkthroughs, APT threat emulation, and real security workflows — all public.
Credentials
Rank: [0xE][GUARDIAN] · View Profile →
Get in Touch
Open to Cloud Engineer and AWS Security roles. Building in the security space? Let's talk.
mbrar9766@gmail.com linkedin.com/in/manjot67 github.com/Manjotsingh12-cyber youtube.com/@CYBERSECURITY-c7f tryhackme.com/p/mbrar9766