Rabby Misakabo

• Develop and deploy Terraform and CloudFormation infrastructure as code security, thus automating NIST, ISO 27001, and CIS standard compliance in cloud environments. • Designed using Jenkins, GitLab, AWS CodePipeline for automation of security checks- SAST/DAST. Ensuring the production environment is free from vulnerabilities. • Implemented security audits and compliance projects like PCI DSS, GDPR, and HIPAA by using tools such as Qualys to ensure zero findings of non-compliance in cloud environments • Automate the security incident response workflow by integrating AWS Lambda and AWS Config with Splunk and DataDog SIEM solutions to reduce the incident response time. • Configured and maintained AWS Security Hub to aggregate, organize, and prioritize security findings across AWS accounts and services, improving incident response time by 35%. • Utilized AWS Key Management Service (KMS) to manage the lifecycle of encryption keys and enforce encryption at rest and in transit for sensitive data across storage and databases. • Conducted periodic security assessments and internal audits to ensure adherence to NIST 800-53 controls and guidelines across cloud assets and workloads. • Optimize AWS IAM policies to minimize access risks by 20%, ensuring adherence to the principle of least privilege. • Deploy AWS WAF to enhance web application security, reducing vulnerabilities and achieving a 15% drop in security incidents. • Monitor systems in real-time using AWS CloudWatch, cutting incident response times by 30% through proactive threat detection. • Establish centralized monitoring and alerting frameworks using CloudWatch, Prometheus, and Grafana, reducing mean time to resolution (MTTR) by 70%. • Develop, implement, and manage security controls across AWS environments, leveraging cloud-native APIs to build and maintain system- and network-level security tools.

• Orchestrated containerized applications using Docker, Kubernetes (EKS), and AWS Fargate, enabling automated scaling, load balancing, and simplified management of microservices. • Built and managed CI/CD pipelines using AWS CodePipeline, GitHub Actions, Jenkins, and Bitbucket Pipelines to automate application deployments, enhance code quality, and improve release velocity. • Automate routine cloud operations with Bash scripts and Python-based vulnerability scanners, minimizing manual intervention by 50%. • Leverage Ansible and Ansible Tower to manage configuration across 200+ servers, ensuring consistency and simplifying complex deployments. • Craft disaster recovery solutions using Auto Scaling and Elastic Load Balancers (ELB), ensuring 99.95% uptime and robust fault tolerance. • Managed AWS resources by importing EBS volumes, launching EC2 instances, creating security groups, and configuring auto-scaling, load balancers, Route 53, and SNS as required. • Conducted Git best practices training sessions for new team members, reducing version control errors by 35% and streamlining workflows. • Configured and managed security measures across AWS environments, including setting up IAM roles and policies, using AWS KMS for encryption, and configuring AWS WAF, AWS Shield, and AWS Security Hub to safeguard resources against threats. • Ensured compliance with security best practices and conducted audits using AWS Security Hub, AWS Macie, and regular encryption checks (At-Rest/In-Transit) to meet regulatory requirements and enhance data protection. • Implemented and monitored cloud security measures, including AWS Inspector, GuardDuty, and AWS Secrets Manager for vulnerability management, threat detection, and secrets management.