Security Engineer

• The project focuses on evaluating a Security-as-Code tool designed for assessing Microsoft 365 environments and Entra ID.
• The primary objective is to understand the deployment process, including its configuration and integration within existing systems.
• The project involves: conducting a comprehensive analysis of the tool's functionalities; identifying its strengths and potential areas for improvement; performing a gap analysis by comparing the tool with another security assessment script, and determining areas where it excels and where enhancements might be necessary.
• Additionally, the project explores the implementation of custom controls within the Security-as-Code framework.
• This involves delving into the technical aspects of the tool to understand how custom policies and controls can be developed and integrated into the existing framework.
• Collaboration with team members is essential to design and test these custom controls, ensuring they meet the teams specific security needs.
• Through this project, participants will gain experience in security assessment methodologies, Microsoft 365 and Entra ID features and architecture, and the customization of security solutions, contributing to the enhancement of the organization's security posture through automation.

Internship, Cloud Security – MS 365 Security-as-Code Analysis

Cyber Security Manager

Application Security Consultant, Threat Modeling