Sofiya Hassen

Cybersecurity | DevSecOps | Cloud Security

I work across cybersecurity operations, security engineering, and DevSecOps, with a focus on building practical security controls and automating security processes.

Areas of Focus

Cybersecurity

• Security monitoring and detection
• Vulnerability assessment
• Security operations
• Risk assessment and GRC

DevSecOps

• CI/CD security
• SAST and secret detection
• Dependency and container security
• Security automation

Cloud & Infrastructure

• AWS
• IAM
• Docker
• Terraform
• Linux

Programming & Automation

• Python
• Bash
• Java

Selected Work

DevSecOps Security Pipeline

Designed and implemented security controls within a CI/CD workflow, including secret detection, static application security testing, dependency auditing, and container security checks.

Security Monitoring

Worked with Wazuh and Grafana to investigate security monitoring issues, troubleshoot alert pipelines, and improve visibility into infrastructure security events.

GNZABE

Contributed to the development of a cybersecurity awareness and governance platform incorporating phishing simulations, security monitoring, risk analysis, and security controls.

Security Automation

Developing Python-based automation tools for repetitive security and infrastructure tasks.

Current Focus

AWS Security Cloud Security Engineering DevSecOps Infrastructure as Code Security Automation AI Security

Technologies

AWS Python Bash Docker Terraform Linux Git GitHub Actions Wazuh Grafana Semgrep Gitleaks

Contact

LinkedIn : https://www.linkedin.com/in/sofiya-mohammed-hassen-420139244?utm_source=share_via&utm_content=profile&utm_medium=member_android upwork: https://www.upwork.com/freelancers/~019f5ad866645f0ac3?companyReference=1542142123557834753&mp_source=share