Résumé
ONYEDIKACHI BERNARDCLOUD · DEVSECOPS · AI
RésuméGet in touch

HELLO, I'M

Onyedikachi Bernard

Cloud security and DevSecOps engineer. I find the misconfiguration, prove the risk, fix it and validate the fix.

Cloud Security & DevSecOps Engineer

I find the misconfiguration, prove the risk, fix it and validate the fix.

View my workGet in touch
SCROLL
01 / 07
01THE RECORD

The Record

Every lab is written up end to end, from the first finding to the validated fix, so the work can be checked rather than taken on trust.

DOCUMENTED LABS32Cloud + DevSecOpsSECURITY DOMAINS8From IAM to IaCCERTIFICATES & BADGES9Issued by TryHackMe
WORKSRemoteOr hybrid
02 / 07
02DISCIPLINES

Three Orbits

Cloud security, DevSecOps and AI security. Tap a planet, or swipe the card, to move between them.

RING 02 · DEVSECOPS06 TOOLS

DevSecOps

Seventeen labs securing the path from commit to production: CI/CD pipelines, the software supply chain, containers and infrastructure as code.

GitLab CIDockerKubernetesTerraformPythonCI/CD
Browse 17 DevSecOps labs
03 / 07
03FEATURED WORK

Featured
Case Studies

CLOUD · IDENTITYIAM Compromise InvestigationRogue admin access traced, removed and put under alerting.CASE STUDY · 01CLOUD · IDENTITYThe Overpowered RoleAn app role scoped back to only what it needs.CASE STUDY · 02DEVSECOPS · IACTerraform IaC HardeningInfrastructure code reviewed and hardened before deploy.CASE STUDY · 03DEVSECOPS · CI/CDSecuring the Build ProcessExposed source code and a committed secret, found and flagged.CASE STUDY · 04
View all projects32 LABS · 8 DOMAINS
03 / 07
03FEATURED WORK

Featured Case Studies

CLOUD · IDENTITYIAM Compromise InvestigationRogue admin access traced, removed and put under alerting.CASE STUDY · 01CLOUD · IDENTITYThe Overpowered RoleAn app role scoped back to only what it needs.CASE STUDY · 02DEVSECOPS · IACTerraform IaC HardeningInfrastructure code reviewed and hardened before deploy.CASE STUDY · 03DEVSECOPS · CI/CDSecuring the Build ProcessExposed source code and a committed secret, found and flagged.CASE STUDY · 04THE FULL RECORD32 labs.
8 domains.Every project, filterable by discipline and domain.View all projects
04 / 07
04TOOLKIT

Skills & Technologies

My core skills and the technologies behind them, across cloud security, DevSecOps and AI security.

DEVSECOPSPipelines, containers, IaC
  • GitLab
  • CI/CD
  • Docker
  • Kubernetes
  • Terraform
  • Ansible
  • Bash
  • Linux
  • OpenSSL
CLOUDAWS identity, network, data
  • AWS
  • IAM
  • VPC
  • EC2
  • S3
  • KMS
  • CloudTrail
  • CloudWatch
  • Systems Manager
  • EventBridge
AI & RISKModels, frameworks, risk
  • Python
  • LLM Security
  • Prompt Injection
  • Adversarial ML
  • MITRE ATLAS
  • MITRE ATT&CK
  • STRIDE
  • OWASP LLM
  • NIST AI RMF
05 / 07
05WRITING

Latest
Writeups

All writeupsFULL ARTICLES · ALSO ON MEDIUM
AI · ADVERSARIAL MLJUL 2026

Why Every AI Security Professional Should Understand FGSM, BIM and PGD

How gradient-based attacks nudge a model's input just enough to flip its prediction, how the three methods differ in cost and strength, and why defenders should use them to test robustness.

Read article5 MIN READ
AI · LLM SECURITYMAY 2026

Prompt Security and Context Window Integrity in LLMs

What actually sits inside a model's context window, how prompt injection, prompt leakage and context poisoning abuse it, and the defences that help, with their honest limits.

Read article8 MIN READ
IDENTITY · ACCESSJUN 2026

Understanding Identity and Access Management (IAM)

Identification, authentication, authorisation and accountability explained, why home-made auth protocols fall to replay attacks, and how access control models and single sign-on compare.

Read article5 MIN READ
All writeupsFULL ARTICLES · ALSO ON MEDIUM
06 / 07
06ABOUT

About Me

I'm Kachi, a security engineer working across cloud security, DevSecOps and AI security. I learn by doing: every misconfiguration I find gets fixed, verified and written up so someone else can follow the same path.

More about me
More about me
07 / 07CONTACT

Let's work togetherLet's build something secure together.

I'm open to cloud security and DevSecOps roles, contract work and collaborations. Email reaches me fastest.

AVAILABLE · REMOTE OR HYBRID
EMAIL
kachisichobernardokoh@gmail.com
Email meOr send a message through the form