As a Security Analyst & Engineer, I specialize in building production-grade security infrastructure and conducting threat detection & response operations. My work spans:
- 🛡️ Blue Team Excellence: Enterprise SIEM deployment, detection engineering, log analysis, and security operations
- ⚔️ Red Team Skills: Web exploitation, reverse engineering, and CTF competition
- 🏗️ Security Engineering: Building secure systems, automation frameworks, and open-source security tools
| Area | Project | Status |
|---|---|---|
| 🛡️ Detection Engineering | Production-Ready Wazuh SIEM (Hardened Setup) | 🔄 Active |
| 🔍 Log Analysis | Custom Log Parsing & Detection Pipelines (Python + SQLite) | 🔄 Active |
| 🏗️ Secure Systems | Backend Security & Application Hardening | 🔄 Active |
| 🧪 Offensive Training | CTFs (Binary Exploitation, Web, Forensics) | 🔄 Ongoing |
Security-hardened SIEM architecture designed for 50–75 endpoints with:
- TLS/mTLS-secured communication (Manager ↔ Indexer ↔ Agents)
- Custom detection rules and correlation logic
- Filebeat authentication & log pipeline optimization
- Deployment automation and scalability considerations
Intelligent log analysis framework featuring:
- XML → SQLite conversion for complex SIEM logs
- Dynamic schema generation for unknown/evolving log formats
- Detection rule grouping and enrichment
- Pattern analysis for security event correlation
Hands-on exploitation and challenge writeups:
- Web vulnerabilities (XSS, SSRF, auth bypass, logic flaws)
- Binary exploitation and reverse engineering
- Challenge walkthroughs and methodology documentation
Break → Understand → Automate → Secure
My approach combines:
- Analytical rigor for threat detection and root cause analysis
- Automation-first thinking to scale security operations
- Defense-in-depth architecture for resilient systems
- Continuous learning through CTFs, research, and hands-on labs
- 🚀 Detection Engineering Lab: Build comprehensive Wazuh + custom detection rules environment
- 📚 Security Research: Publish CTF writeups, security articles, and technical blogs
- 🛠️ Open-source Tools: Develop community security tools for log analysis and threat detection
- ☁️ Cloud Security: Deepen expertise in AWS/GCP security architecture and compliance
- 📧 Email: amanrkt231217@gmail.com
- 🔗 GitHub: @mayomacam
- 💼 LinkedIn: mayomacam-2676
"Security is not a product, but a process. Let's build systems that stand the test of adversaries."