Aya Barmani

Designed and implemented a complete DevSecOps CI/CD pipeline on Oracle Cloud Infrastructure (OCI) following a shift-left security approach, integrating security controls throughout the software development lifecycle. The pipeline performs static code analysis, dependency scanning, container image scanning, and dynamic security testing. The target application is deployed and orchestrated on a Kubernetes cluster, with the pipeline automatically triggered on every code change.

During this internship, I worked on a project focused on designing and securing a cloud infrastructure on AWS. The project involved deploying a vulnerable web application (DVWA), implementing security and monitoring services such as CloudTrail, VPC Flow Logs, GuardDuty, and Security Hub, and conducting security tests (SQL injection, XSS, and DDoS simulations). I also implemented AWS WAF with an Application Load Balancer (ALB) to analyze and mitigate attacks, allowing me to evaluate the effectiveness of cloud-native security controls.