Cloud Security Engineer building detection systems, hardened cloud infrastructure and AI-driven security tooling. Currently studying Computer Science with AI at Birmingham City University.
I work where modern attacks actually land — in cloud control planes, CI pipelines, identity systems and AI agents. My focus is building detections that fire on real adversary behaviour, not noise; and shipping the tooling, dashboards and runbooks that turn alerts into outcomes.
My long-term ambition is to work at the boundary of software engineering and cloud operations as a Cloud Security Engineer or Security Software Engineer. I am dedicated to designing robust detection architectures for cloud platforms and building intelligent tooling to automate security infrastructure.
Outside of core engineering, I read tech news daily, experiment with new developer tools, write native iOS applications in Swift, play cricket, and focus on physical conditioning.
An AI-powered elderly-care ecosystem featuring fall detection, a smart pendant, a family companion application, and a clinician telemetry dashboard. Combines custom hardware integration, real-time alerting software, and a complete viable business model.
Cross-platform host hardening and security telemetry toolkit. Configures system logs, audits security baselines, and generates JSON alert feeds mapped to the MITRE ATT&CK matrix.
| Tactical Phase | Technique ID | Remediation Rule |
|---|---|---|
| Execution | T1059.001 | Constrained Language Mode |
| Persistence | T1053.005 | Scheduled Task Auditing |
| Defense Evasion | T1562.001 | Registry Tamper Block |
Secure-by-default healthcare platform featuring strict authentication/authorization (JWT, RBAC), encrypted SQL database backends, automated session expiry, and detailed audit logging pipelines to protect patient PII.
Retrieval-augmented security assistant that drafts cloud detection rules, conducts interactive, role-specific technical mock interviews, and provides comprehensive performance metrics.
Local-only web application security lab with a vulnerable build, remediated secure build, and pentest/remediation workflow for portfolio demonstration.
Local detection engineering lab for simulated log ingestion, rule-based alerting, triage, and tuning.
| Rule ID | Target Behavior | Severity |
|---|---|---|
| SIG-2026-01 | Web App Exploit (T1190) | High |
| SIG-2026-02 | Valid Account Hijack (T1078) | Medium |
Traditional security relies heavily on static, perimeter-focused telemetry that creates alert fatigue. My approach to operations is centered on **behavioral detection engineering** — modeling the actual techniques adversaries use at every phase of the lifecycle, as mapped by the MITRE ATT&CK framework.
By mapping telemetry pipelines in cloud control planes (AWS CloudTrail), build workflows (CI pipelines), and host processes directly to known behaviors, I write precise detection rules designed to identify post-exploitation activity while minimizing false-positive signals.
Through automation and structured alert runbooks, I help build systems that move security teams directly from detection to verified remediation outcomes in real time.
Embedded within the Birmingham City University IT and security team, working on monitoring, analyzing, and safeguarding the university's enterprise infrastructure. Spearheading vulnerability assessment workflows, security monitoring, and endpoint protection schemes, while planning and executing proactive defensive measures to detect and mitigate active threats across university network boundaries.
Leading the Cyber Security Division of the BCU Student Computing Association, responsible for designing and delivering technical programmes, events, and learning experiences that give students hands-on experience in cloud security, penetration testing, and defensive security. Responsible for full curriculum design, session delivery, lab guide development, GitHub resource management, and end-to-end technical coordination across all division activities. Current flagship programme: Hack Your Own Cloud — an 8-week structured cloud security programme where student teams deploy, attack, and defend real AWS environments.
Coordinating the Software Engineering Division of the BCU Student Computing Association, responsible for designing and delivering programmes, workshops, and events that build real technical skills in software development and engineering. Responsible for full curriculum design, session delivery, team structure, technical mentorship, and end-to-end coordination across all division activities. Current flagship programme: API Workshop Series — an 8-week full stack programme where student teams build and deploy real applications powered by live external APIs.
Embedded as a full stack developer on CivitasAccess — a civic guidance and opportunity navigation platform built for UK students and international students. Responsible for the complete front-end architecture and UI build across 24 pages, alongside back-end planning, admin system design, and direct client collaboration throughout the product lifecycle.
Built complex, interactive components with unified state management and modular front-end architecture.
Coded responsive layouts using semantic nodes and structured visual custom variables.
Designed clean component primitives, typography scales, and spacing grids with consistent design tokens.
Structured tagging schemas, user profile structures, and relational models with strict separation of sensitive fields.
Specified transport encryption, single sign-on flows, and separation of administration routes.
Designed opportunities CRUD interfaces, stats management, and no-code builders for non-technical users.
Mapped client payloads, designed REST API response patterns, and integrated external data nodes.
Delivered progress reports, wireframe audits, and led scope alignment calls.
Evaluated pull requests, audited component layouts, and checked code syntax standards.
Across this project I applied security thinking at every layer of the build — from specifying SSL enforcement and planning Google OAuth as the primary authentication path, to structuring user data fields with GDPR compliance in mind and designing admin routes with full separation from public-facing flows. I'm actively developing my expertise toward a career in cybersecurity, and this project has given me hands-on context for understanding how security decisions are made during the front-end and architecture phases of a product, not just after the fact.
"An exceptional learner and an asset to our classes. He demonstrated excellent analytical, practical, and critical thinking skills, allowing him to quickly understand complex computing concepts and apply them effectively."
"An exceptionally bright student with a natural aptitude for software development and a genuine programmer's mindset. He possesses strong technical ability... I highly recommend him for any software engineering opportunity."
"Prem consistently demonstrated strong technical ability, dedication, and enthusiasm for learning. He showed excellent problem-solving skills, quickly grasped programming concepts, and applied them effectively."
We are building the ultimate simulation engine for cybersecurity professional development. Cyber Interview AI allows candidates to train on realistic scenarios and enables organizations to streamline recruitment with automated, job-role aligned assessments.
An AI-powered interview platform tailored specifically for the cybersecurity industry. It conducts realistic, interactive mock interviews using a custom-trained model, evaluates responses in real time, and provides detailed feedback.
Supports 150+ Roles including:
The Candidate Problem: Generic AI interview tools ask generic interview questions. Human interviewers are expensive and inconsistent, leaving security graduates and job seekers flying blind.
The Recruiter Problem: Organizations lack a reliable, scalable way to technically screen cybersecurity candidates before committing expensive engineering hours to live interviews.
Target Audience:
Seed round open. Reach out to discuss investment opportunities.
Join the early access waitlist to test the platform mock engine.
Universities, bootcamps and recruiting agencies welcome.
"15.6" 2-in-1 convertible with a Super AMOLED 1080p touchscreen, Intel Core i7 (11th Gen) with Intel Iris Xe Graphics, 16GB LPDDR4x RAM, 512GB NVMe SSD, and a 360° hinge for tablet/laptop switching. Runs Windows 11 + Ubuntu dual-boot for cross-platform security testing. MIL-STD-810 military-grade rated.
iPad Pro 13-inch (M5) — Max Configuration. Used as a high-performance secondary display, portable work environment, and digital architecture canvas. Paired with Apple Magic Keyboard (Aluminum) and Apple Pencil Pro.
Browser developer tooling, custom responsive layouts, and lightweight device emulation targets to ensure fluid accessibility across viewports.
Python, JavaScript, Node.js, Bash, PowerShell, SQL, HTML/CSS, and Git. Focused on rapid local iteration cycles: code, test, verify, and document.
Splunk SIEM, Suricata IDS, Wireshark packet capture, Docker containers, Burp Suite, Nmap scanner, and custom detection rule pipelines.
I use a hybrid environment where local sandboxes and cloud resources complement each other. This entails building safe configurations locally before executing against enterprise-grade telemetry and cloud deployment baselines.
I'm open to placement for 2027 and internship for 2027 in cybersecurity, cloud security, detection engineering and AI-adjacent security tooling — UK or remote.