Information Security & Compliance Engineer at a HIPAA-regulated health information exchange,
where I also hold the Information Security Officer designation and own our HITRUST certification.
Built a vulnerability management program from policy to remediation. Ran credentialed scans against a Windows Server in Azure, prioritized findings by risk, remediated through change management, and verified each fix with a rescan. Reduced findings from 27 to 5 (81%) and documented the remaining risk as formal exceptions.
Full intrusion investigation on NPT-WS01 in Microsoft Defender Advanced Hunting. Wrote a NIST SP 800-61 incident report with ATT&CK mapping and a containment plan.
Converted detection logic into a live, scheduled Sentinel analytics rule with entity mapping and MITRE ATT&CK technique tagging, taking a passive visualization to an active alerting control.
Sentinel workbook that geolocates and risk-scores Azure control-plane changes by caller IP, so unusual administrative activity stands out at a glance.
Designed five Conditional Access policies and an Intune compliance policy, validated them with Entra's What If tool, and exported the configuration with Microsoft Graph PowerShell.
- Website Delivery with CloudFront: Secure static site delivery using CloudFront, S3, and origin access controls
- Building a Virtual Private Cloud in AWS: Multi-tier VPC architecture with subnet segmentation and traffic controls
- Cloud Security with AWS IAM: Least-privilege IAM policies, roles, and access boundaries
- Encrypting Data with AWS KMS: Customer-managed KMS keys, encryption at rest and in transit, key rotation
- Secrets Manager + Lambda Secret Retrieval: Serverless secret retrieval using the AWS Parameters and Secrets Lambda Extension, with local caching verified via CloudWatch log timing
- Threat Detection with GuardDuty: Attacked an intentionally vulnerable web app with SQL and command injection, exfiltrated EC2 credentials to access S3, then investigated the resulting GuardDuty findings and tested Malware Protection with an EICAR file
- AI Security Scanner: CLI tool that scans Python files for vulnerabilities using the Gemini API, with color-coded severity output
I write about what I'm learning at sahilk.io/blog.
