Mr. Deffult

IT Systems Administration | DevSecOps | Cybersecurity Engineering

View projects Email me LinkedIn GitHub
2020hands-on with Linux since
3open-source security tools
8credentials on Credly
2030expected graduation
# /etc/ssh/sshd_config  (how I like my servers)
PermitRootLogin        no
PasswordAuthentication no
PubkeyAuthentication   yes
MaxAuthTries           3

About me

I'm Ahmed Akmal, a systems and security engineer in training from Beni Suef. I turn Linux administration into repeatable security checks, and I put those checks where they run on every change.

Administer

Day-to-day Linux work on Ubuntu, Debian, Fedora, Kali and Parrot: permissions, users, SSH, services and troubleshooting.

Automate

Python and Bash tools and GitHub Actions workflows that replace manual checklists with scripts that run the same way every time.

Secure

Auditing system posture, scanning networks and containers, and reviewing code and secrets before they reach production.

  1. 2020

    Started hands-on work with Linux: administering systems, auditing them for weak spots, and automating the routine parts.

  2. Building

    Wrote an audit tool, a network scanner and a DevSecOps pipeline, and completed training with the Linux Foundation, Cisco, AWS and IBM.

  3. Researching

    Independent research into request-rate-limiting weaknesses, bypass scenarios and the threat surface of AI and LLM systems.

  4. 2030

    Expected graduation from Beni Suef Korean Technological University (BTU), Department of Information Technology. Currently in the first year.

Technical skills

Grouped by the kind of work they support.

Operating systems and administration

Running and hardening Linux hosts.

  • Ubuntu
  • Debian
  • Fedora
  • Kali Linux
  • Parrot OS
  • System auditing
  • File permissions and access control
  • SUID/SGID review
  • SSH configuration and hardening
  • User and privilege review
  • Troubleshooting

Networking and security

Finding what is exposed and what is vulnerable.

  • TCP port discovery
  • Network reconnaissance
  • Service fingerprinting
  • Vulnerability assessment
  • Nmap
  • OpenVAS
  • Nikto
  • ffuf
  • Wireshark

DevSecOps and automation

Security checks built into the delivery pipeline.

  • Git
  • GitHub
  • GitHub Actions
  • Docker
  • CI/CD security integration
  • SAST
  • Secret detection
  • Dependency scanning
  • Container security scanning
  • Automated security gates

Programming and scripting

Tools that turn manual checks into code.

  • Python
  • Bash
  • Security tool development
  • Automation

Cloud and secure software

Cloud fundamentals and secure-by-design habits.

  • AWS Cloud Essentials
  • Cloud infrastructure fundamentals
  • Secure software development

Projects

Open-source work on GitHub. Expand a project for the details, or open the repository.

DevSecOps Security Pipeline

View on GitHub

An automated security CI/CD pipeline built on GitHub Actions and Docker. It runs SAST, secret detection and container vulnerability scanning.

  • GitHub Actions
  • Docker
  • SAST
  • Secret detection
  • Container scanning
commit>SAST>secret detection>container scan>security gate
  • Every change goes through the same security checks automatically.
  • Containers are scanned for known vulnerabilities before they are used.
  • Findings show up in the pipeline, not after release.

Linux System Audit & Monitor

View on GitHub

An auditing tool in Bash and Python that checks a Linux machine's hardening posture.

  • Bash
  • Python
  • SSH
  • Hardening
  • SUID/SGID checks to spot unexpected privileged binaries.
  • File permission review for risky or world-writable paths.
  • SSH hardening checks on the server configuration.
  • User and privilege validation.

NetVuln Scanner

View on GitHub

A network reconnaissance tool that finds what is listening and what it is vulnerable to.

  • Python
  • Port scanning
  • CVE correlation
  • Reporting
discover ports>fingerprint services>match CVEs>structured report
  • TCP port discovery across a target.
  • Service fingerprinting to identify what is running.
  • CVE correlation, with results written as a structured report.

Applied cybersecurity research

Write-ups coming soon

Independent research into request-rate-limiting weaknesses and bypass scenarios, and into the threat surface of AI systems and LLMs.

  • Rate limiting
  • Bypass analysis
  • LLM security

How I work

The loop I follow on any system, from a single server to a pipeline.

  1. Discover

    Map what exists: hosts, open ports, services and users.

  2. Audit

    Check it against a baseline: permissions, SSH, privileges, known CVEs.

  3. Harden

    Fix what the audit found and keep the change small and reversible.

  4. Automate

    Turn the check into a script or a pipeline stage so it runs every time.

Certifications and badges

Eight completed courses and credentials. Select any badge to open my Credly profile.

Get in touch

Open to internships, junior roles and collaboration in systems administration, DevSecOps and security engineering. Pick whichever channel suits you.

Emailahmedakmal584@gmail.com LinkedInAhmed Akmal Ahmed GitHubgithub.com/Deffult