Shaistha Khanum
Cloud Security Analyst @Vernovi Cyber
Signup · Get unlimited contacts
WORK HISTORY
Cloud Security Analyst @Vernovi Cyber
London, GB
Designed and deployed secure AWS infrastructure using Terraform, implementing Infrastructure as Code (IaC) best practices.• Configured and managed IAM roles and policies, enforcing least-privilege access controls across AWS resources.• Implemented AWS security services including GuardDuty, Security Hub, AWS Config, and CloudTrail to enable real-time threat detection and compliance monitoring.• Built automated security monitoring and alerting mechanisms using CloudWatch and SNS.• Identified and remediated cloud misconfigurations (e.g, S3 public access, overly permissive security groups, IAM policy risks).• Implemented auto-remediation mechanisms using AWS Lambda and Config rules to strengthen security posture.• Conducted security testing and validation of deployed environments to evaluate detection and response effectiveness.• Produced technical documentation outlining architecture design, security controls, and remediation workflows.
EDUCATION
Visvesvaraya Technological University
Engineer’s Degree, Electronics and communication engineering
University of Hertfordshire
MSc Cybersecurity
SKILLS
ABOUT SHAISTHA KHANUM
I am a Cloud Security Engineer with an MSc in Cybersecurity, specialising in securing AWS environments through architecture design, threat detection, and compliance automation.My experience includes implementing AWS security services such as IAM, GuardDuty, Security Hub, AWS Config, CloudTrail, and KMS to design secure-by-design cloud infrastructures. I have hands-on experience deploying and securing environments using Terraform, with a strong focus on Infrastructure as Code security, compliance validation, and automated remediation.Through practical implementation and research, I have built serverless monitoring architectures, simulated cloud-based attack scenarios, and evaluated detection and remediation effectiveness. My work aligns with industry best practices including CIS benchmarks and risk-based security controls.Alongside defensive cloud security engineering, I am developing expertise in cloud and web application penetration testing to strengthen my understanding of attacker methodologies and enhance defensive architecture.I am seeking opportunities within the UK to contribute as an AWS Security Engineer or Cloud Security Engineer, supporting organisations in building secure, resilient, and compliant cloud environments.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.