👋 Hi, I'm Bashar Khatib, a Software Engineering student at the Open University of Israel focused on cloud & runtime security, detection engineering, and systems programming. I like working close to the operating system in C, building practical security tools in Python, and running them in containers. Alongside my degree I'm completing two full-year bootcamps: Cyber Security and DevOps / Backend (through Jan 2027).

• Cloud & Kubernetes security, runtime threat detection
• Systems programming & OS internals (Linux kernel, xv6)
• Networking and blue-team / SOC operations
• Backend microservices, CI/CD and Linux automation

• ☁️ Cloud & DevOps: AWS Cloud, CI/CD, microservices virtualization & deployment, Spring Cloud, configuration management
• 🔌 Backend: Spring Boot, Spring Security, JPA / Hibernate & Spring Data, Kafka streaming, OpenFeign, Postman & Swagger
• 🗄️ Data & Workflow: JDBC, MySQL, MongoDB, Jira, Agile
• 🔐 Certifications: eJPTv2 and CCNA (in progress)

Hardened Portfolio: basharkhatib.me A live PHP + MariaDB site on a hardened Ubuntu droplet: CSRF tokens, login lockout against brute force, hardened sessions, Content-Security-Policy and HSTS, a least-privilege database user, a firewall and automatic security updates. PHP MariaDB nginx Linux

Log Analysis API: Intrusion Detection Service A containerised REST API that parses Linux auth logs, detects brute-force and intrusion patterns with rule-based anomaly detection, and shows alerts on a web dashboard. Python REST Docker

Linux Auth Log Analyzer A Python tool that parses Linux authentication logs to detect brute-force patterns and flag suspicious user behaviour. Part of a broader cybersecurity mini-projects portfolio. Python

ForgeLab: Active Directory Domain Lab A full AD domain in VMware with Windows Server 2016 and Windows 10 clients: OU design, group permissions, DNS/DHCP, hardened GPOs and security event monitoring from a blue-team perspective. VMware Windows Server

TechNova Windows Server Lab Automated and hardened a Windows Server 2016 environment (AD, DNS, DHCP) with security policies enforced through Group Policy Objects. Windows Server GPO

Cybersecurity Assistant: AI Guardrail Tester Stress-tests a security-focused AI assistant against jailbreaks, social engineering and data-extraction prompts, then implements and evaluates guardrails. Python

xv6 OS Labs: xv6-02 · xv6-03 Extensions to the xv6 Unix-like kernel: process management, new system calls and memory handling. C Linux

Two-Pass Assembler in C Assembler for a custom assembly language with macro preprocessing, symbol tables, instruction encoding and .ob / .ext / .ent output. C GDB

Northstar Labs Operations Toolkit Shell automation toolkit scripting real Linux operational workflows. Final project of the Linux Fundamentals automation track. Bash

netmon-autotest Test automation suite that simulates network-switch telemetry and runs regression checks with pytest. Python pytest

Enterprise Network Configuration Lab Multi-site enterprise topology with VLAN segmentation, OSPF routing, NAT and ACL-based traffic control. Cisco Packet Tracer

• cyber-security-vault: notes, scripts and labs from the Cyber Security bootcamp
• devops-backend-vault: notes and exercises from the DevOps / Backend bootcamp

• Grow into a cloud security / detection engineering role
• Deploy my detection projects on AWS and Kubernetes
• Complete eJPTv2 and CCNA
• Build a portfolio that shows real-world skill in security, systems programming, Linux and cloud

Learning next:

Last updated: October 2026