Cloud & Infra Security

Diagnose Google Cloud IAM access denials and request temporary fixes

Turn Slack access requests into least-privilege GitHub and AWS IAM grants with checks

Check AWS resources against your compliance policy daily and draft reviewed fixes

Work through Prowler Cloud findings to bring a cloud account into framework compliance

Write openCypher attack path queries over the Cartography cloud graph schema

Create, sync and audit security compliance frameworks with their mapped checks

Add a new cloud provider or service to an existing security scanner SDK

Create a cloud security check with implementation and metadata for any provider

Audit firewall, SSH and update settings on a host and schedule recurring checks

Configure Vercel firewall rules, WAF, rate limits and bot blocking during attacks

Audit host security with firewall, SSH and update hardening and exposure reviews

Map cloud IAM attack paths across AWS, Azure and GCP after credential discovery

Find public cloud storage, snapshots and exposed credentials across major clouds

Hunt exposed Kubernetes and Docker APIs, kubelet exec and container escapes

Configure the BaoTa Nginx WAF for CC defense, injection blocking and IP rules

Fix IAM policy, trust policy and STS mistakes and generate least-privilege roles

Check AWS security service coverage for WAF, Network Firewall and certificates

Lock down S3 buckets with access controls, encryption, logging and fixes

Provision an AWS Security Agent space, IAM role and S3 bucket for scans

Set up AWS Shield Advanced DDoS protection, detection and response for resources

Configure and troubleshoot Cloudflare One Zero Trust and SASE deployments

Plan migrations from VPN, SWG and SASE platforms to Cloudflare One

Discover exposed S3, GCS and Azure Blob buckets from observed domain names

Test Kubernetes API servers, RBAC, service accounts and etcd for weaknesses

Audit host firewall, SSH and update settings and set a risk posture

Run joiner, mover and leaver access changes and fully deprovision leavers

Approve, deny and audit Admin By Request elevations from the command line

Audit Google Workspace users, Drive, Gmail and OAuth apps from a local store

Find dangerous patterns in AWS IAM and resource policies and their conditions

Find AWS IAM privilege escalation paths like PassRole and AssumeRole chains

Exploit leaked cloud access keys from enumeration to resource takeover

Audit IAM policies on AWS, Azure, GCP and Tencent Cloud for escalation paths

Abuse cloud instance metadata endpoints through SSRF to steal IAM credentials

Exploit Google Cloud metadata, service account keys and IAM to escalate access

Exploit misconfigured S3, OSS, COS and OBS buckets for public read and write

Attack serverless functions through event injection, env leaks and code overwrites

Extract credentials from Terraform state files and remote backends

Run azqr compliance scans and Key Vault expiry checks on Azure resources

Map Azure resources to Microsoft Cloud Security Benchmark control domains

Check Docker containers against the OWASP Docker Top 6 and fix gaps

Assess internal IT infrastructure against the OWASP Infrastructure Top 10

Harden CI/CD pipelines, containers and Kubernetes RBAC with secrets and SAST checks

Manage IAM users, roles and policies with least-privilege access

Audit systems against CIS benchmarks and apply hardening fixes for compliance

Protect internal apps with Cloudflare Access, device posture and Zero Trust policies

Harden Docker images and containers with non-root users and read-only filesystems

Configure iptables, nftables and cloud firewalls with segmentation and filtering

Set up SSO, SCIM provisioning and MFA for a small team with Okta or Google

Apply Kubernetes security contexts, Pod Security Standards and network policies