/KoredeSec · security engineer
I find the ways systems break, then I build the detection that catches the next attempt.
Security Engineer specializing in cloud security, detection engineering, and DevSecOps.
Attack, detect, harden.
BSc Thesis - Original Research
AWS Bedrock (Llama 3.1 8B) · EC2 · OpenSearch · Flask · LangChain · IAM · CloudTrail
Deployed a RAG chatbot on AWS Bedrock and built a 35-test-case security framework spanning LLM, RAG, and cloud layers. Shipped 14 hardening controls, raising the Security Posture Score with 100% vulnerability remediation.
Press apply to run the 14 hardening controls against the stack.
67.09%
Baseline Security Posture Score
Vulnerabilities present across 3 layers
SOC Lab
Azure VM as a honeypot, forwarded live attack logs to Sentinel, built a real-time attack map. Created automated incident response workflows using Logic Apps; alerts fired within minutes. Wrote KQL rules targeting failed RDP logins (Event ID 4625), enriched attacker IPs with GeoIP watchlist data, automated metadata logging to a custom Sentinel table via Logic App.
Threat Intel
Python/Flask tool pulling IOCs from OTX, FeodoTracker, AbuseIPDB, and VirusTotal; deduplicates across feeds, geolocates threats on an interactive map. Integrated Slack and email alerting: live IOC notifications with zero manual intervention. Reduced IOC review time by consolidating 4 separate threat feeds into a single normalized dashboard.
DevOps
Production-grade Bash script that fully automates Dockerized app deployment on remote Linux servers: repo pull, Docker setup, Nginx reverse proxy config, and secure SSH handshake in a single command. Eliminated an estimated 15+ minutes of manual deployment steps per release cycle.
Cloud
Production-ready CLI tool recreating cloud VPC functionality entirely on Linux using container networking primitives (subnets, routing tables, security groups), no cloud dependency. Implements subnet isolation, custom routing tables, and iptables-based security group rules mirroring AWS VPC behavior.
Three structured roles across detection engineering, SOC operations, and cloud infrastructure.
Jan – Apr 2026
Remote
Cyblack Internship
Sep – Dec 2025
Remote
Cyblack SOC Academy
Aug – Nov 2025
Remote
AWS re/Start Program
The background, skills, and certifications behind the security work on this site.
I'm a security engineer with hands-on experience across the full security lifecycle: penetration testing, detection engineering, cloud infrastructure hardening, and governance. I approach security not as a checklist but as a practice: understanding how systems break, and building the controls and visibility to keep them from breaking at scale.
I've completed two structured training programs (the Cyblack SOC Academy and the AWS re/Start program) and a six-sprint security internship covering threat intelligence, cloud security, GRC, and SOC operations. My academic foundation is a BSc in Cybersecurity from Osun State University (UNIOSUN), where I also served as the Pioneer President of NACSS UNIOSUN across two administrations, from 2024 to 2026.
Credentials
| ISC2 CC | Certified in Cybersecurity |
| Google Cybersecurity Professional Certificate | |
| AWS Certified Cloud Practitioner | |
| Microsoft SC-200: Security Operations Analyst | Recertified, valid to 2027 |
| CCNA | Planned |
AWS (EC2, VPC, S3, CloudTrail, KMS, SNS, EventBridge, IAM, Bedrock, OpenSearch) · Azure (VMs, Sentinel, Logic Apps) · Docker · Nginx · Apache2 · SSH/SCP · Git
Threat Intelligence (OTX, FeodoTracker, AbuseIPDB, VirusTotal) · SIEM (Microsoft Sentinel) · Microsoft Defender for Cloud · KQL · Burp Suite · OpenCTI · MITRE ATT&CK · Nessus · Ansible · Incident Response · Log Analysis · Honeypot Deployment
Python (Flask, LangChain, automation, threat intelligence tooling) · Bash · SQL · YAML · JSON · HTML/CSS
ISO/IEC 27002 · NYDFS 23 NYCRR 500.07 · PCI-DSS · Privileged Access Management · Policy Authoring · WCAG 2.1 · NIST SP 800-30
Pioneer President of the Nigeria Association of Cyber Security Students (NACSS), Osun State University, across two administrations.
Pioneer President of NACSS UNIOSUN (Nigeria Association of Cyber Security Students), 2024–2026. I built the association from its founding and led it across two administrations, growing it from a new departmental association on paper into an active platform where students build security skills, compete, and connect with professionals.
Under my leadership, NACSS delivered Cyber Fairs, cybersecurity bootcamps, ISC training programs, hackathons, and NACSS Week. I drove student participation, engaged speakers, and turned ideas into programs students actively learned from.
I also represented the Department of Cybersecurity within the wider Faculty of Computing and Information Technology (FOCITSA) student leadership community. My service across both administrations was recognised with four awards: Departmental President of the Year (FOCITSA), Cloud Security Analyst of the Year, Security Analyst of the Year, and Award of Service.
Awards
Essays on the blog, and lab write-ups on Medium. Each lab is one I actually ran, documented end to end.
From the blog
Lab write-ups on Medium
Read all writing on Medium ↗
Open to security engineering, cloud security, and SOC roles.
Best reached by email for roles, collaborations, or a conversation about detection engineering and cloud security. I read every message and reply within two business days.