Hi, I'm Mandeep Singh Kapoor 👋

Senior Cloud Security Engineer · Berlin, Germany 🇩🇪  |  9+ years securing cloud, containers & code

---

🛡️ About Me

I'm a cloud security engineer with 9+ years spanning the security spectrum — from penetration testing and web application security to building and scaling security programs on multi-cloud, Kubernetes-native platforms. My hands-on work covers web & application security, cloud & container security, SIEM & threat detection, runtime detection & incident response, and policy-as-code with Terraform — currently as Senior Cloud Security Engineer at commercetools in Berlin.

• 🔭  Building detection & response, secure-by-default guardrails, and shift-left tooling
• 🧰  I turn security policy into automation — SIEM pipelines, IaC scanning, and CI/CD guardrails
• 🐛  Bug-bounty background: valid reports to Google, Uber, Twitter, Slack & Booking.com; Synack Red Team top-100 (2019)
• 📫  Reach me at mandeeps13k@gmail.com or on LinkedIn

---

📜 Certifications

• 🛡️ CKS — Certified Kubernetes Security Specialist  ·  Linux Foundation, 2022
• ☸️ CKA — Certified Kubernetes Administrator  ·  Linux Foundation, 2022
• 📡 OSWP — Offensive Security Wireless Professional  ·  OffSec, 2016
• 🌐 Akamai Kona Site Defender (2020)  ·  Bot Manager Foundations (2019)

---

🧰 Tech Arsenal

Cloud & Containers      

Security & Detection      

IaC & Languages      

---

🚀 Featured Work

☁️ Cloud Security gcp-scc-finding-notification-jira-cloud — SCC findings → Jira wazuh-terraform-modules — AWS/GCP Wazuh SIEM modules wazuh-custom-rules — GCP event detection rules gcp-cloud-audit — GCP audit tooling scc-tf-secure-templates — tfsec in PR comments

🔐 AppSec, K8s & Tooling sonar-jira-integration — SonarQube issues → Jira appsec-checklist — Web & API security checklist claude-skills — security automation skills cks-notes — CKS exam notes cka-notes — CKA exam notes

---

📊 GitHub Activity

   

_{All-time across public repositories · commits + pull requests + issues}