Opeyemi Toriola — Cloud Security Engineer

About

Background

I got into cloud security through curiosity about how things break. While studying Computer Science, I started exploring how misconfigured AWS environments could be exploited, which led me to build tools that detect and fix those exact issues in production.

My experience spans cloud security engineering, DevOps, and infrastructure automation. I have worked as a DevOps Engineer at Bincom.dev, interned in cloud security at Cyblack, and spent time as a cybersecurity instructor at both NIIT and AFROSHIELDAI, where I trained engineers on AWS, Terraform, Docker, and Kubernetes.

What keeps me going is the challenge of building security systems that are automated, scalable, and actually catch real threats. Every project I ship gets deployed against live AWS infrastructure with real findings, not demo data.

AWS Terraform Python Docker Kubernetes MITRE ATT&CK FastAPI CI/CD Remote-first

Technical Skills

What I work with

Grouped by domain. Click any category to expand.

☁️

Cloud & AWS 14 services

⌄

AWS GuardDuty Security Hub IAM CloudTrail VPC Flow Logs S3 EC2 EKS ECS Lambda EventBridge KMS DynamoDB Step Functions

🔒

Security & Detection 9 tools

⌄

MITRE ATT&CK Kill Chain Analysis Blast Radius Scoring SOAR Splunk IoC Analysis Incident Response Burp Suite Metasploit

⚙️

DevOps & IaC 8 tools

⌄

Terraform Docker Kubernetes GitHub Actions CloudFormation Helm Bandit SAST Prometheus

💻

Programming 7 languages & frameworks

⌄

Python FastAPI Pydantic asyncio Node.js JavaScript Bash

📋

Compliance 4 frameworks

⌄

CIS AWS Foundations v1.5 NIST CSF SOC 2 Type II PCI DSS v4.0

Projects

Things I have built

All deployed against live AWS infrastructure. Real findings, real fixes.

Flagship Project

CloudSentinel

A full-stack cloud security posture management platform with 15 AWS security rules spanning IAM, S3, EC2, CloudTrail, VPC, EBS, and RDS. Each rule is mapped to a MITRE ATT&CK technique with context explaining exactly how the misconfiguration enables that technique. The remediation engine runs two tiers: auto-execute for critical findings, SNS approval workflow for high severity. Compliance reports map findings to CIS, NIST, SOC 2, and PCI DSS.

Scanned account 358487322954 (eu-north-1) — 6 findings, 5-tactic kill chain reconstructed, all 6 remediated, 0 remaining.

Python FastAPI React DynamoDB Terraform MITRE ATT&CK GitHub Actions

GitHub

Offensive Security

AWS Attack Path Analyzer

A Python CLI and FastAPI tool that automatically discovers privilege escalation paths, lateral movement opportunities, cross-account attack chains, and exposed sensitive resources across AWS environments. Built with an SCP-awareness engine that traverses the full AWS Organizations OU chain to eliminate false positives, plus a condition key evaluator that checks IAM policy conditions to classify paths as EXPOSED, CONDITIONAL, or BLOCKED.

34 exploitable paths found, 16 CRITICAL, overall risk 95/100. Cross-account path detected from management to Log Archive account.

Python FastAPI NetworkX D3.js IAM SCP-aware Docker

GitHub

SOAR

Cloud-Native SOAR Platform

8-microservice SOAR normalising alerts from Security Hub, GuardDuty, CrowdStrike Falcon, Splunk ES, and Wiz Cloud. Sliding-window IoC correlation, MITRE ATT&CK auto-mapping, Step Functions response playbooks. Deployed on EKS with Terraform IRSA and Helm.

Python EKS Step Functions Kinesis Redis

GitHub

Detection

GuardDuty Threat Pipeline

Event-driven detection pipeline using GuardDuty, EventBridge, Lambda, CloudTrail, DynamoDB, and SNS. MITRE ATT&CK mapping, dynamic blast radius scoring, severity-tiered auto-remediation. Captured a real Severity 8 UnauthorizedAccess finding during development.

Node.js Lambda GuardDuty EventBridge Terraform

GitHub

Experience

Where I have worked

2024 — 2025

DevOps Engineer

Bincom.dev

Monitored cloud infrastructure and security events with Splunk, improving operational visibility and reducing mean time to detection.
Investigated Linux, Windows, and network issues through log correlation and root-cause analysis.
Produced technical documentation, incident reports, and operational runbooks used across engineering teams.

2024 — 2026

Cybersecurity Instructor

AFROSHIELDAI

Delivered practical training on AWS, DevOps, cloud security, Linux, and infrastructure automation.
Mentored learners through hands-on Terraform, Docker, Kubernetes, and Git workflows.

Jan 2023 — Jun 2023

Cloud Security Intern

Cyblack

Supported AWS deployments using Terraform, Kubernetes, Docker, and Puppet.
Implemented IaC practices that delivered repeatable, consistent cloud environments.
Contributed to automation initiatives that reduced manual deployment effort.

Nov 2024 — Apr 2025

Cybersecurity Instructor & Mentor

NIIT

Trained 50+ students in cybersecurity, AWS fundamentals, networking, and cloud security labs.
Designed hands-on lab environments using Kali Linux, Burp Suite, Metasploit, and Wireshark.

🏆 Outstanding Mentor Award 2025

2021 — 2025

B.Sc. Computer Science

Olabisi Onabanjo University

Built production-grade AWS security platforms alongside formal study, validating each against live infrastructure.

Certifications

☁️

AWS Cloud Practitioner

Amazon Web Services

In Progress

🏗️

AWS Solutions Architect – Associate

Amazon Web Services

In Progress

🔒

CompTIA Security+

CompTIA

In Progress

🔍

CompTIA CySA+

CompTIA

In Progress

🔵

BTL1 – Blue Team Level 1

Security Blue Team

In Progress

🏆

Outstanding Mentor Award

NIIT · 2025

Awarded

GitHub

Activity

Live stats from GitHub.

Contribution activity

Contact

Get in touch

Open to cloud security and DevOps roles

Looking for cloud security engineering and detection engineering positions where I can build security automation at scale. Fully available for remote and global opportunities.

email opeyemitoriola41@gmail.com linkedin toriola-opeyemi github GeekyBlessing resume Download CV (PDF)

name

email

message

OpeyemiToriola

Opeyemi
Toriola