CYBERSECURITY • CLOUD SECURITY • SOC

Cybersecurity
in practice.

Cybersecurity professional with hands-on experience in SOC operations, threat intelligence, vulnerability management, and cloud security. I build practical security solutions, investigate threats, and apply security principles to real-world infrastructure and systems.

Explore my work ↘ GitHub ↗
Chukwuemeke Marvin Unumadu

CYBERSECURITY PROFESSIONAL

Chukwuemeke
Marvin Unumadu

LinkedIn ↗
security_profile

$ cat focus.txt

SOC operations

Cloud security

Detection engineering

Threat intelligence

Vulnerability management

Incident response

$

AWS•SECURITY OPERATIONS•DETECTION ENGINEERING•THREAT INTELLIGENCE•INCIDENT RESPONSE•VULNERABILITY MANAGEMENT

01 / SELECTED WORK

Projects that show
the work, not just the claim.

Cloud and security projects where I work across infrastructure, identity, automation, monitoring and security engineering.

01

ENTERPRISE IDENTITY • PKI • CLOUD INFRASTRUCTURE

IdentityForge

ONGOING • CLOUD TEAM

An enterprise identity and PKI platform for NexaBank, built as a four-discipline capstone. As part of the Cloud Team, I work on the AWS infrastructure that runs and connects the identity, certificate, API gateway and security platform components.

AWSTerraformKeycloakRDSALBKMSECSmTLSPKIWazuh

Infrastructure

Provisioning the platform infrastructure with Terraform and remote state, including AWS networking, load balancing and supporting services.

Identity platform

Supporting a highly available Keycloak deployment backed by PostgreSQL, with the administrative interface restricted through the bastion architecture.

PKI & trust

Running the certificate infrastructure on EC2 and supporting the device-trust layer, including KMS protection for the issuing CA private key and revocation infrastructure.

API gateway

Supporting the API gateway layer that terminates mTLS, validates device certificate chains and passes verified certificate identity to the NexaBank API.

Security & operations

Applying security-group controls, HTTPS/ACM, infrastructure-as-code practices and an ongoing cost/right-sizing plan for a platform intended to remain live after the cohort.

Architecture goal

The platform must prove that access requires both a valid Keycloak identity and a trusted device certificate, with certificate revocation demonstrated within 60 seconds.

Cloud Team scopeTerraformKeycloak HARDS PostgreSQLPKImTLSALBKMS
Status: Ongoing
02

CLOUD SECURITY ENGINEERING

VaultCloud

EXPADOX LAB

A deliberately misconfigured AWS environment hardened from the ground up — moving from assessment through Zero Trust, posture management, automated remediation, incident response and red-team validation.

AWSIAMZero TrustProwlerPythonLambdaGuardDutyTrivy

Challenge

Start with an inherited AWS “Breach Zone” and establish a measurable security baseline before making changes.

Security work

Identity-based access, least privilege, SCP guardrails, network micro-segmentation, posture checks, vulnerability remediation and secrets scanning.

Automation

Lambda remediations triggered by EventBridge, plus a Step Functions incident-response flow for high-severity GuardDuty findings.

Validation

Before/after posture measurement, re-scans, deliberate misconfiguration tests and red-team attempts to prove controls hold.

Evidence focusPosture improvementCVE remediationIAM auditDetection-to-response timing
View project documentation ↗
03

AWS CLOUD DEPLOYMENT • FINOPS

TradeCore

EXPADOX LAB

A production-style AWS deployment built around a real cost constraint, balancing security, availability, observability and delivery speed without provisioning services simply because they exist.

AWSTerraformECS FargateRDSCognitoCI/CDCloudWatchSecrets Manager

Architecture

VPC networking, ALB, ECS Fargate, RDS PostgreSQL, ECR, Secrets Manager, Cognito and Amplify.

Security

HTTPS termination, security-group isolation, secret injection through Secrets Manager and no plaintext application credentials.

Delivery

GitHub Actions with OIDC, automated staging deployment, production approval gates and a tested rollback path.

Observability & cost

CloudWatch alarms and Logs Insights queries alongside budget controls, daily cost checks and overnight scaling to reduce spend.

Evidence focusArchitecture decisionsCI/CDCost controlMonitoring
View project documentation ↗

02 / ABOUT

Growing into a
security specialist.

My focus is defensive cybersecurity: understanding what is happening in an environment, investigating security events, identifying weaknesses and turning findings into practical remediation.

My hands-on work spans SOC operations, threat hunting, incident response, cloud security, vulnerability assessment, threat intelligence and security engineering.

I also bring an understanding of security from a governance and risk perspective, including ISO 27001 and the relationship between technology, people, process and business requirements.

03 / TOOLKIT

Technical focus

01

Security Operations

Alert triage · Phishing investigation · Incident response · Threat hunting · Detection engineering

02

Cloud Security

AWS · IAM · VPC · Security Groups · EC2 · Cloud security controls · Hardening

03

Security Tooling

Wazuh · Rapid7 IDR · SentinelOne · TheHive · Netskope · Prowler · JumpCloud · Bolster AI · Trivy · GuardDuty

04

Engineering

Python · Flask · Docker · Terraform · GitHub Actions · Webhooks · AWS CLI

05

Threat & Vulnerability

IOC analysis · CTI gathering · Vulnerability assessment · Nmap · Metasploit · Wireshark

06

GRC

ISO 27001 · Risk assessment · Security controls · Risk treatment · Audit evidence

04 / CREDENTIALS

CompTIASecurity+
ISC2Certified in Cybersecurity (CC)
CiscoCyberOps Associate
CiscoNetworking Basics

05 / LET'S CONNECT

Interested in the work?

GitHub ↗ LinkedIn ↗
EMAIL