I'm a cybersecurity professional building hands-on experience across cloud security, defensive security, infrastructure security, and security operations.
My current focus is on securing and automating cloud environments, with an emphasis on AWS, IAM, cloud networking, logging and monitoring, Infrastructure as Code, containers, and DevSecOps.
I learn by building practical environments, breaking and troubleshooting them, documenting the problems I encounter, and implementing security controls that reflect real-world scenarios.
- ☁️ Cloud Security Engineering
- 🔐 AWS Security & IAM
- 🏗️ Secure Cloud Infrastructure
- 🧱 Infrastructure as Code Security
- 🐳 Docker & Container Security
- ☸️ Kubernetes Security
- 🔄 DevSecOps & CI/CD Security
- 📊 Cloud Logging, Monitoring & Detection
- 🛡️ Vulnerability Management
- 🚨 Defensive Security & Incident Response
AWS
- EC2
- VPC
- IAM
- S3
- Security Groups
- Network ACLs
- Route Tables
- Internet Gateway
- Application Load Balancer
- CloudWatch
- CloudTrail
- AWS CLI
Infrastructure as Code
- Terraform — Learning & building
- Infrastructure provisioning
- Secure infrastructure configuration
- IaC security concepts
Containers
- Docker — Learning
- Kubernetes — Learning
- Identity & Access Management (IAM)
- Least Privilege
- Security Groups & Network ACLs
- VPC Security
- EC2 Hardening
- Cloud Logging & Monitoring
- CloudTrail
- CloudWatch
- Security Architecture Fundamentals
- Infrastructure Security
- Secure Cloud Configuration
- AWS Security Best Practices
- Security Monitoring
- Log Analysis
- Alert Investigation
- Threat Detection Fundamentals
- Incident Response Fundamentals
- Network Traffic Analysis
- Security Event Investigation
- Vulnerability Assessment
- Risk Identification & Prioritization
- CVSS-Based Risk Analysis
- Security Documentation & Reporting
- TCP/IP
- DNS
- DHCP
- Routing
- VLANs
- ACLs
- NAT
- Network Troubleshooting
- Firewall Concepts
- Network Traffic Analysis
- ARP
- ICMP
- TCP/IP Packet Analysis
- Wireshark
- Nmap
- Burp Suite
- Kali Linux
- Cisco Packet Tracer
- GNS3
- VirtualBox
- Git
- GitHub
- AWS CLI
- Linux
- Windows
- Python
- Bash fundamentals
- User & Permission Management
- Service & Process Management
- Security Automation Fundamentals
A hands-on cloud project designed around a realistic application environment rather than a simple isolated AWS tutorial.
- Designed an AWS VPC using a
10.0.0.0/16CIDR - Created public and private subnets
- Configured Internet Gateway
- Configured route tables
- Deployed EC2 infrastructure
- Configured Security Groups
- Implemented an Application Load Balancer
- Network segmentation
- Public vs private infrastructure
- Security Group configuration
- Secure access to cloud resources
- Cloud infrastructure troubleshooting
- Security-focused architecture decisions
Next phase: extending the environment with Terraform, containerization, Kubernetes, monitoring, and additional cloud security controls.
Deployed and hardened an Apache web server on AWS EC2 with a focus on practical Linux and cloud security controls.
- AWS EC2 deployment
- SSH key-based authentication
- Security Group configuration
- UFW firewall configuration
- Linux security hardening
- Web server deployment
- Network access control
Hands-on network analysis and packet investigation using Wireshark and command-line capture tools.
- Capturing live network traffic
- TCP three-way handshake analysis
- DNS traffic analysis
- HTTP/HTTPS traffic investigation
- ICMP traffic analysis
- ARP packet analysis
- Identifying source and destination IP addresses
- Identifying MAC addresses
- Packet timestamps and protocol fields
- Display and capture filters
Also practiced command-line packet capture using dumpcap.
Built and analyzed virtual network environments using GNS3.
- IP addressing
- ARP analysis
- ICMP troubleshooting
- Network connectivity testing
- Routing concepts
- Packet analysis
- ARP spoofing concepts
- MAC flooding concepts
- Network troubleshooting
Hands-on vulnerability assessment in controlled lab environments.
- Network discovery
- Port scanning
- Service enumeration
- Vulnerability identification
- Risk analysis
- CVSS-based prioritization
- Remediation recommendations
- Security documentation
Tools: Nmap, Kali Linux and other security testing utilities.
During my defensive security internship, I have been developing practical experience in security operations and network defense.
- Security monitoring and investigation
- Network traffic analysis
- Wireshark packet analysis
- Vulnerability assessment
- Network troubleshooting
- Security event investigation
- Defensive security concepts
- Documentation of technical findings
- Practical security labs and simulations
This experience has strengthened my understanding of how security controls operate in practice and how technical findings can be investigated and documented.
I'm currently progressing toward a Cloud Security Engineering role through a hands-on learning path:
- IAM & advanced identity security
- VPC security
- CloudTrail
- CloudWatch
- GuardDuty
- Security Hub
- AWS Organizations
- Service Control Policies
- Secure cloud architecture
- Infrastructure as Code
- Reusable infrastructure
- Terraform state
- Modules
- Secure IaC practices
- IaC security scanning
- Container fundamentals
- Image security
- Container hardening
- Secrets management
- Kubernetes architecture
- RBAC
- Network Policies
- Pod security
- Secrets
- Container security
- CI/CD security
- Secrets management
- SAST
- Dependency scanning
- IaC scanning
- Container scanning
- Security gates in pipelines
I prefer learning through building and troubleshooting rather than only studying theory.
My projects typically follow this process:
Design
↓
Build
↓
Secure
↓
Break / Troubleshoot
↓
Investigate
↓
Remediate
↓
Document
↓
Automate
📫 Connect With Me
LinkedIn: www.linkedin.com/in/ehilegbu-favour-841b162a1
Email: samuel49favour@gmail.com