Ellan Wambugu Gichuru

Senior Cloud & Application Security Engineer · Platform Security · DevSecOps

Nairobi, Kenya

Certifications

Smart Contract Auditing Cyfrin

Projects & Labs

project

cyber-orchestration-agent

Built an open-source security analysis CLI for AWS infrastructure performing multi-provider IaC static analysis, live AWS environment auditing, and AI-driven remediation. Maps findings to CIS AWS, NIST 800-53, ISO 27001, and MITRE ATT&CK.

TypeScript, AWS SDK v3, Anthropic SDK, Commander.js, Vitest, Terraform, CloudFormation, CDK
project

EKS Threat Matrix & Compliance Crosswalk

Authored a MITRE ATT&CK-style threat matrix for AWS EKS environments with crosswalks to major compliance frameworks, translating Kubernetes attack techniques into auditable control mappings.

MITRE ATT&CK, EKS, SOC 2, PCI-DSS, ISO 27001, CIS, NIST CSF
project

Serverless Apartment Complex Management

Developed an open-source serverless application demonstrating secure, scalable AWS architecture patterns and best practices for serverless security.

AWS Lambda, Python, Django REST Framework, AWS Serverless

Skills

Cloud Security

AWSCloud Security ArchitectureKubernetes SecurityDocker SecurityDevSecOpsAWS (EKS, Lambda, API Gateway, Security Hub, GuardDuty, IAM, KMS, CloudWatch)Cloud Security Posture Management (CSPM)Cloud Infrastructure Entitlement Management (CIEM)Cloud Workload Protection Platform (CWPP)Amazon EKSOPA/Gatekeeper

GRC & Compliance

PCI-DSS ComplianceISO 27001SOC 2

Identity & Access

IAM GovernanceOAuth2OIDCSecrets ManagementIdentity and Access Management (IAM)Role-Based Access Control (RBAC)OpenID Connect (OIDC)

Network Security

mTLSWeb Application Firewall (WAF)Network Segmentation

SIEM & Monitoring

SIEMDatadogFalcoDatadog Cloud SIEMMicrosoft Sentinel

Offensive Security

Threat ModelingSecure Code ReviewOWASP API Top 10API Security TestingMITRE ATT&CKPenetration TestingSTRIDE Threat Modelling

Incident Response

Incident ResponseCyber Threat Intelligence

Scripting & Automation

OPA GatekeeperSemgrepInfrastructure-as-CodeTerraformAWS CloudFormationAWS CDKGitHub ActionsGitLab CIPython

Operating Systems

Linux HardeningKubernetesDocker