

DevSecOps and Cloud Security Engineer with 10+ years of experience in AWS, Azure, IBM Cloud, CI/CD security, IAM governance, vulnerability management, and security automation. Experienced in implementing cloud security controls, automating workflows using Python, Bash, and AWS Lambda, and integrating security into SDLC and cloud-native environments. Skilled in DevSecOps practices, cloud security, SIEM, SAST/DAST, and infrastructure security across multi-cloud platforms.
• Maintain secure CI/CD pipelines using GitLab CI/CD and DevSecOps practices
• Integrate SAST, DAST, and vulnerability scanning into development workflows
• Automate cloud and security operations using Python, Bash, AWS Lambda, Terraform, and CloudFormation
• Manage cloud security controls, IAM policies, and access management in AWS and Azure
• Monitor and respond to security findings from SIEM, GuardDuty, Security Hub, and vulnerability scanners
• Conduct vulnerability assessments and support remediation activities
• Collaborate with development and infrastructure teams to improve security and automate deployments
• Support cloud migration projects and implement secure cloud architecture
• Configure monitoring, logging, and alerting solutions for cloud environments
• Maintain security documentation, compliance controls, and operational procedures
• Perform Linux system hardening and infrastructure security configuration
• Optimize cloud resources, security processes, and operational workflows through automation
• Implement secure cloud architecture and security best practices across AWS and Azure
• Develop automation workflows using AWS Lambda, Python, and Bash for operational and security tasks
• Implement IAM governance, encryption management, and cloud security controls
• Lead BSP audit remediation and compliance initiatives for cloud environments
• Configure private links, load balancers, and firewall integrations for third-party applications
• Conduct vulnerability assessments and remediation activities across cloud platforms
• Collaborate with development and operations teams to integrate security into in their processes
• Optimize cloud resources and support cost management initiatives in AWS and Azure
• Establish cloud security baselines, monitoring, and governance standards
• Supported cloud security operations across AWS and Azure environments
• Assisted with BSP audit remediation and compliance documentation
• Conducted vulnerability assessments and security monitoring activities
• Managed IAM policies, cloud security controls, and encryption configurations
• Supported cloud migration and infrastructure security initiatives
• Collaborated with infrastructure and development teams to implement security best practices
• Assisted in automating operational and security tasks using scripting and AWS services
• Supported monitoring, firewall, and network security configurations for cloud environments
Cloud Security across AWS, Azure, and IBM Cloud
DevSecOps and CI/CD Security Implementation
Security Automation using Python, Bash, and AWS Lambda
IAM Governance and Access Management
Vulnerability Assessment and Penetration Testing (VAPT)
SAST/DAST and Security Scanning Integration
SIEM Monitoring and Threat Detection
Infrastructure Security and System Hardening
Linux Administration across Red Hat, Ubuntu, and Debian
Cloud Infrastructure Management for IaaS and PaaS
Security Compliance and Audit Remediation
Cloud Security Posture Management
Infrastructure as Code using Terraform, CloudFormation, and Ansible
Monitoring and Logging Solutions
Container and Cloud-Native Security
Database and Messaging Platform Support
Cross-functional Collaboration with Development and Operations Teams
Terri John P. Andoy
DevSecOps Engineer - Unionbank of the Philippines
09566750589
Allan Moral
Infrastructure Architech - Unionbank of the Philippines
0917-828-8669