I am a Cybersecurity Graduate Student and the Founder & CTO of Postura. I specialize in building autonomous multi-cloud security remediation platforms, orchestrating event-driven AWS security automation, and implementing continuous compliance lifecycles.

"Securing systems isn't just about detecting threats — it's about automating remediation at scale."

Autonomous Multi-Cloud Security Remediation Platform Real-time threat ingestion, risk scoring mapped to industry frameworks, and human-in-the-loop automated IaC drift repair.

graph TD
    %% Styling Definitions
    classDef cloud fill:#fdf6e2,stroke:#ff9900,stroke-width:2px;
    classDef engine fill:#e1f5fe,stroke:#0288d1,stroke-width:2px;
    classDef framework fill:#efebe9,stroke:#5d4037,stroke-width:2px;
    classDef pipeline fill:#e8f5e9,stroke:#388e3c,stroke-width:2px;

    subgraph Cloud_Layer [Target Multi-Cloud Environment]
        GD[AWS GuardDuty Alerts] -->|Event Stream| SH[AWS Security Hub]
        CT[CloudTrail Logs] --> SH
    end

    subgraph Postura_Core [Postura Core Engine]
        SH -->|Webhook Ingestion| Ingest[Ingestion Pipeline]
        Ingest --> Engine[Risk Scoring Engine]

        subgraph Compliance_Mapping [Framework Mapping]
            Engine --- NIST[NIST CSF 2.0]
            Engine --- MITRE[MITRE ATT&CK]
        end

        Engine -->|State Analysis| Drift[Terraform Patch Generator]
    end

    subgraph Governance [Human-In-The-Loop Flow]
        Drift -->|Webhook Alert| Intercept{UI / Slack Approval}
        Intercept -->|Approved| GH[GitHub Actions CI/CD]
        Intercept -->|Rejected| Drop[Log & Drop Event]
    end

    GH -->|Terraform Apply| AWS[Remediated AWS Infrastructure]

    class GD,SH,CT,AWS cloud;
    class Ingest,Engine,Drift engine;
    class NIST,MITRE framework;
    class Intercept,GH,Drop pipeline;

American Express — GRC Engineer (Jun 2025 – Present)

• Run technology risk and security control assessments across payment and enterprise platforms using ServiceNow GRC and NIST CSF 2.0, reducing high-risk findings through prioritized remediation.
• Test and validate controls against NIST SP 800-53 Rev. 5 and PCI-DSS v4.0, improving audit readiness across 120+ security controls.
• Maintain enterprise risk registers in RSA Archer; partnered with technology teams to cut overdue risk items by 20%.
• Built executive risk/compliance dashboards in SQL and Power BI for KRI, control health, and remediation visibility.

KPMG — GRC Engineer (Jan 2022 – Jul 2024)

• Monitored 200+ security controls across banking operations against FFIEC, SOX, PCI-DSS, and NIST CSF using ServiceNow GRC.
• Conducted ITGC testing (SailPoint, Active Directory) covering access reviews, change management, and segregation of duties for SOX compliance.

graph LR
    Scan[Vulnerability & Drift Scanning] -->|Identify Gaps| Assess[Risk Evaluation & Framework Mapping]
    Assess -->|Generate Remediation| Orchestrate[Automated Orchestration]
    Orchestrate -->|Deploy Fixes| Verify[Remediation Verification]
    Verify -->|Update Metrics Dashboard| Scan

    style Scan fill:#eceff1,stroke:#455a64,stroke-width:2px
    style Assess fill:#fff9c4,stroke:#fbc02d,stroke-width:2px
    style Orchestrate fill:#ffe0b2,stroke:#f57c00,stroke-width:2px
    style Verify fill:#c8e6c9,stroke:#388e3c,stroke-width:2px

• Google Cybersecurity Professional
• CompTIA Security+ (SY0-701)
• AWS Certified Solutions Architect – Associate (in progress)

MS in Cybersecurity University of Maryland, Baltimore County (UMBC) | NSA Center of Academic Excellence (CAE-R/CD) 📅 Aug 2024 - May 2026

B.Tech in Computer Engineering (Honors in Cybersecurity) St. Francis Institute of Technology 📅 2020 - 2024

If you want to discuss multi-cloud automation architectures, zero-trust infrastructure engineering, or SaaS security patterns, reach out via LinkedIn or send an Email.