Vansh Bhardwaj — Cloud Security Resume

Bachelor of Science in Computer Science — Texas State University
Aug 2023 – Expected March 2027

Minor in Business Administration
Cybersecurity focus
Relevant coursework: Computer Systems and Security; Operating Systems; Assembly Language; Computer Architecture; Data Structures; Data Oriented Programming; Computer Ethics

Summer 2024

Collaborated with cloud and AI teams to develop secure and scalable shipping and mailing platform applications.
Automated environment provisioning, configuration validation, and telemetry collection using Python and Bash scripting.
Designed and tested backend services and APIs deployed in Microsoft Azure environments.
Built CI/CD pipelines using GitHub Actions, Azure DevOps, and Jenkins.
Configured and managed virtual desktop infrastructure workflows using Citrix Workspace.
Participated in sprint planning, code reviews, and secure software development practices.

Cloud Platform Azure Portal, Storage, Front Door, Functions, Cosmos DB, Container Registry, Container Apps, Log Analytics
Identity & Governance Microsoft Entra ID, RBAC, Azure Policy, Management Groups, Service Principals
Compute & Networking Azure VMs, VM Scale Sets, Load Balancer, NSG, VNet Peering, Network Watcher, Route Tables
Infrastructure as Code Terraform, ARM Templates, Bicep
Containers Docker, Azure Container Registry, Azure Container Apps
CI/CD GitHub Actions, Jenkins, Azure CLI, Azure PowerShell
Configuration Management Ansible
Secret Detection Gitleaks (CI pipeline + pre-commit hooks)
SAST SonarQube
Dependency Scanning Snyk
Container Security Trivy
Edge & Web Security Cloudflare WAF, Access, Workers, Bot Protection, Page Shield, DNS, DNSSEC, HTTP Security Headers
Observability Grafana, Azure Monitor, Azure Log Analytics
Detection & SIEM Splunk
Network Analysis Wireshark, tcpdump, Nmap, Zenmap
Firewall & Segmentation pfSense, iptables, NSG
Virtualization & Imaging VirtualBox, VMware, Windows Sysprep
Operating Systems Linux (Ubuntu, Kali), Windows Server, Windows, macOS
Programming & Scripting Python, PowerShell, Bash, JavaScript, C++, Java
Frontend & Testing HTML, CSS, pytest
Security Frameworks OWASP Top 10

Apr 2026

Built a full DevSecOps pipeline around a real-time multiplayer Flask application deployed to Azure Container Apps, with every stage of the pipeline automated through Jenkins running self-hosted in Docker.
Integrated four layers of automated security scanning: Gitleaks for secret detection (CI pipeline and pre-commit hooks), SonarQube for static code analysis, Snyk for dependency CVE scanning, and Trivy for container image scanning — all running on every commit before code reaches production.
Deployed a Cloudflare Worker at the edge to validate API keys on protected routes, inject HTTP security headers on every response, and run a scheduled cron audit logging request statistics every five minutes.
Provisioned all Azure infrastructure as Terraform IaC including Container Registry, Log Analytics Workspace, Container Apps Environment, and Container App with a Service Principal scoped to least privilege.
Implemented post-deploy verification using an Ansible playbook that checks response content, response time, and JSON field structure against the live Azure URL before marking the pipeline green.
Connected Azure Monitor to Grafana to build a live observability dashboard showing request volume over time, recent application logs, and total health check counts using KQL queries against the Log Analytics Workspace.

Feb 2026

Designed and deployed a serverless cloud application on Microsoft Azure with a static frontend, Python Functions REST API, and Cosmos DB backend to enforce application layer separation.
Defined all infrastructure as code using Terraform with modular file structure and documented drift reconciliation for repeatable provisioning.
Built GitHub Actions CI/CD pipelines that run pytest on every build to validate the API and block faulty deployments from reaching production.
Configured Cloudflare DNS with DNSSEC and applied least privilege RBAC to the deployment service principal to reduce blast radius.

Mar 2026

Observed real production traffic using Cloudflare Security Analytics, identified an AWS EC2 reconnaissance bot and anomalous POST requests hitting a static site, and used findings to drive rule creation.
Implemented custom WAF rules targeting OWASP Top 10 patterns including SQL injection, XSS, and path traversal, plus rate limiting on a public API endpoint.
Deployed a Cloudflare Worker to inject HTTP security headers on every response following OWASP guidance, including CSP, HSTS, X-Frame-Options, and Permissions-Policy.
Configured Zero Trust Access with email OTP authentication to gate a protected resource, demonstrating identity-based access control at the network edge without modifying the origin.
Enabled Bot Fight Mode, AI bot blocking, and AI Labyrinth to reduce automated traffic and protect site content.
Codified all security rules and access policies as Terraform using the Cloudflare provider and imported existing resources into state.

Dec 2025

Performed controlled application layer denial of service testing in isolated virtual environments.
Configured Splunk SIEM to ingest Apache access and error logs and built detection queries for low-bandwidth attack patterns not visible to network-volume monitoring.
Correlated telemetry across network, host, and application layers to validate attack signatures and document mitigation recommendations.

Sept 2025

Designed segmented enterprise-style network topology using VirtualBox with Ubuntu Server, Windows, and Kali images.
Implemented firewall policy enforcement using pfSense and iptables to enforce least-privilege communication rules and reduce lateral movement risk.
Validated controls using Nmap scanning and Wireshark packet capture to verify enforcement and document evidence.

Summary of Qualifications