Ali Shan

Background

About Ali Shan

With a strong foundation in DevSecOps, I specialize in integrating security at every stage of the software development lifecycle. Leveraging my expertise in Docker, Kubernetes, and cloud platforms (AWS & Azure), I build scalable, secure, and automated pipelines to drive efficiency and enhance cybersecurity posture, I bring extensive experience in SOC analysis, Penetration Testing, Vulnerability Assessment, and compliance with standards. With hands-on expertise in Linux Administration, Bash scripting, Docker, Ansible, AWS Solutions Architecture, and security frameworks, I ensure robust protection across development and deployment environments. As an ISO 27001 Lead Auditor, I have in-depth knowledge of compliance frameworks including ISO 27017, ISO 27018. Key Skills Security & Compliance: CISSP, ISO 27001, SOC 1 & 2, PCI DSS SOC Analyst: Skilled in incident detection, response, and analysis Pentesting & Vulnerability Assessment: Proficient in identifying and mitigating security risks Cloud: AWS, Azure Operating Systems: RHEL, CentOS, Ubuntu Server Management: Nginx, Apache, MySQL, Jenkins, Puppet Containerization & Orchestration: Docker, Kubernetes CI/CD: Jenkins, GitHub Actions Infrastructure as Code (IaC): Terraform, AWS CloudFormation Monitoring & Logging: ELK Stack Driven by the challenges of DevSecOps and Cybersecurity, I’m open to new and innovative collaboration opportunities in this dynamic field. Let’s connect!