|
▄ ▀ ▀ ▀ ▀▄ ▄ ▄ |
Security engineer. MS Cybersecurity, George Washington University. Attack surface management, cloud security, DevSecOps, GRC. Washington DC metro, open to remote. 5ribalaji.com · LinkedIn · XDA · Telegram · iam.thecloverly@pm.me I build the infrastructure that keeps things standing, then try to break it. Enumerate what is actually exposed, prove the risk, automate the fix, write it down so nobody repeats the work. |
- Post quantum readiness research on email transport security, with a public audit methodology
- Large scale subdomain enumeration and takeover research, disclosed responsibly
- Rebuilding the homelab on a Ryzen 5700G node for Docker services and local model inference
- Writing up self hosting and security work at 5ribalaji.com
- CompTIA Security+ in progress
| Project | What it does | Stack |
|---|---|---|
| Nexus Dashboard | External attack surface monitoring. Enumerates assets, correlates them against live CVE data, tracks exposure over time | Amass, FastAPI, React, NVD API |
| GDPR / CCPA Compliance Checker | Analyzes privacy policies against GDPR and CCPA requirements, returns a gap report | Streamlit, OpenAI API, PostgreSQL |
| University attack surface recon | 11,520 raw subdomains reduced to 693 validated hosts, scoped takeover testing under written permission | subfinder, puredns |
| OpenFang firmware research | Independent vulnerability research on embedded firmware. 10 previously unreported findings | Static analysis, firmware unpacking |
| selfhost-cloud | Personal cloud: Proxmox, Docker services, Tailscale mesh, self hosted n8n, Telegram ops bot | Ubuntu, Proxmox, Docker, Tailscale |
| PixelPlusUI for RM6785 | Official maintainer through 2024. Android 11 to 13 builds plus device community management | AOSP, device trees, CI |
Security: attack surface management, threat modeling, responsible disclosure, Amass, subfinder, puredns, Nmap, Wireshark, ISO 27001
Cloud and infrastructure: AWS, Google Cloud, Azure, Proxmox, Docker, Kubernetes, Terraform, Linux, Nginx, GitHub Actions, Tailscale, n8n
Languages: Python, Bash, JavaScript, TypeScript, Java, Kotlin, C++
Application and data: FastAPI, Node.js, React, PostgreSQL, MongoDB, Redis, Streamlit
- Black Hat USA 2026 Student Scholarship recipient
- Aspen Cyber Summit Scholar, inaugural cohort, 1 of 17 selected
- BSides Las Vegas 2026 volunteer
- XDA Developers Senior Member, ROM maintainer and device community lead
- 25 percent merit scholarship, George Washington University
Certifications: IBM Cybersecurity Analyst, AWS Academy Cloud Security Builder, University of Colorado Computer Security and Systems Management, ISO 27001 Master.
Open to security engineering, cloud security, and DevSecOps roles.