Hasnain Ghoghari

I am a security-focused systems and cloud engineer with hands-on experience across infrastructure monitoring, security operations, DevSecOps automation, cloud security, and offensive security testing.

I began my career in 24×7 infrastructure and application monitoring, ensuring high availability and reliability using tools like Zabbix and Grafana, where I handled alert triage, incident escalation, operational dashboards, and root cause analysis. This foundation gave me strong operational discipline, SLA awareness, and real-world incident handling experience.

Currently, I work as an Associate System Administrator with a strong security engineering focus, where I operate at the intersection of SecOps, DevSecOps, and cloud security. My work includes web and API penetration testing, identifying authentication, authorization, business logic, and access control vulnerabilities through manual testing using Burp Suite, Postman, and cURL, supported by source code review aligned with OWASP Top 10.

I actively implement shift-left security by integrating SAST, SCA, container, and Kubernetes security controls into CI/CD pipelines, using tools such as SonarQube, OWASP Dependency Checkmarx, Kubebench, Trivy, and Kubescape, ensuring vulnerabilities are detected early and remediated before reaching production.

On the cloud security side, I secure and monitor Microsoft Azure environments, focusing on identity security, network hardening, storage security, WAF tuning, and Kubernetes (AKS) security. My responsibilities include Azure Entra ID Conditional Access and MFA enforcement, Key Vault access reviews, NSG and firewall baseline analysis, Azure Front Door WAF tuning, TLS enforcement, logging coverage improvement, and Defender for Containers runtime monitoring.

I also support Kubernetes security and operations, reviewing cluster configurations, pod security contexts, container images, and runtime logs across both AKS and on-prem Kubernetes environments, ensuring secure configurations, version compliance, and visibility for incident investigation.

My work aligns closely with NIST SP 800-53 Rev.5 controls and Zero Trust principles, focusing on least privilege, continuous verification, and secure-by-design cloud architectures.

I am particularly interested in roles that involve SecOps, DevSecOps, Cloud Security Engineering, and Blue Team security, where I can combine offensive security thinking, automation, and defensive monitoring to reduce real-world risk and strengthen security posture.

Speaker at InfraSec Village, Cybersurksha & Gujarat University.

4X Acknowledged by Apple - 2025

Acknowledged by Apple - 2026

Acknowledged by Redbull, Microsoft, Tesla, Substack, etc.