Arman AhemadKhan
— Cloud Engineer
Full-stack developer and ethical hacker with a foundation in cloud infrastructure — I build secure, production-ready web applications and identify vulnerabilities before they become threats. From architecting complete web systems to hands-on penetration testing on Kali Linux, I work at the intersection of development, offensive security, and DevOps.
About
Building at the
intersection of code & security
I'm a 4th-year Computer Science student at Silicon University, Bhubaneswar with hands-on depth across ethical hacking, modern web development, and DevOps — building systems that are intuitive, scalable, and defensible from the core.
In ethical hacking, I explore the offensive side: penetration testing, CTFs, and vulnerability research to understand systems by breaking them. In web development, I build responsive, production-ready full-stack applications with clean architectures, reactive UIs, and secure APIs. Across DevOps, I architect automated DevSecOps pipelines with Docker, Kubernetes, CI/CD, and AWS to guarantee continuous delivery with zero security compromises.
I believe in learning by breaking, then building. Every project in this portfolio started with genuine curiosity and shipped as a hardened, production-ready system ready to defend.
Activity & Commit Telemetry
GitHub Contribution Matrix
@arman080325Experience
Where I've worked
- Conducted vulnerability assessments and penetration testing on web applications to identify and report security flaws
- Performed network reconnaissance and traffic analysis using tools like Nmap, Wireshark, and Burp Suite
- Assisted in identifying OWASP Top 10 vulnerabilities including SQL injection, XSS, and broken authentication
- Analyzed system logs and security alerts to detect suspicious activity and potential intrusion attempts
- Documented findings in detailed security reports with risk ratings and remediation recommendations
- Collaborated with the security team on hardening configurations for Linux servers and web-facing services
- Built an end-to-end DevSecOps pipeline on AWS EKS integrating Terraform, Kubernetes, Docker, CI/CD and security scans
- Implemented AWS CodePipeline using Terraform to provision CodeCommit, CodeBuild and CodeDeploy resources
- Created CI/CD pipelines with GitHub Actions to automate application builds and testing
- Worked with Linux environments for software installation, log analysis and system administration
- Wrote shell scripts to automate backups, log cleanup, and service health checks
- Prepared architecture documentation covering deployment steps and security enhancements
- Worked with EC2, S3, IAM, VPC, CloudWatch and Lambda as part of cloud training projects
- Deployed full-stack applications on EC2 using Linux, Nginx and Git
- Configured S3 buckets with bucket policies and lifecycle rules for cost optimization
- Implemented IAM roles and policies following least-privilege security practices
- Set up CloudWatch dashboards and alarms for CPU/network monitoring
- Automated workflows using AWS Lambda and API Gateway for event-based triggers
Projects
Things I've built
Click Case Study to read the full write-up, or hit Live Demo to see the project running in production.
GitAtlas — Searchable Git Field Guide & DAG Engine
A searchable field guide to 381 Git & GitHub commands across 26 sections — instant multi-term AND search with smart risk detection ('Destroys work' / 'Rewrites history'), 17 guided recovery playbooks, interactive SVG Git DAG graph visualizer, 100% in-browser secret scanner, interactive Command Studio, and zero-install terminal CLI (npx gitatlas). Try the live demo below.
381 commands · 17 playbooks · CLI
SnapURL — Next-Gen Serverless URL Shortener
A highly scalable, serverless URL shortening platform built in TypeScript with Express.js and Turso (LibSQL). Features instant QR code generation, zero cold-start latency, custom aliases, real-time analytics, and a bespoke glassmorphic UI.
Turso Edge Database · Vercel Serverless
CineRoulette — Stop Searching. Start Watching.
A decision-first movie/series recommender: set a mood and a few filters — as few as one, as many as thirty — hit Spin, and get one intelligently weighted, explainable pick pulled from a globally synced TMDB catalog, never a coin flip. Build starts today.
9-signal scoring engine
LifeOS — One Account. One Search. One AI.
A privacy-first personal operating system unifying 20+ life modules — tasks, notes, calendar, health, finance, career, and more — behind a single Ctrl+K universal search and a context-aware AI layer, instead of a dozen isolated apps. Queued to start right after CineRoulette ships publicly.
20+ unified modules
NetScope — Network Packet Analyzer
A live SOC-style browser console for real network traffic: protocol dissection, per-host threat scoring with time-decay, encrypted-payload detection via Shannon entropy, and 12+ attack detectors — SYN floods, port scans, ARP spoofing, DNS tunneling, C2 beaconing — streamed over WebSocket to an animated network map. Try the live demo below.
12+ attack detectors
SiteShield — Web Security Scanner
A multi-tenant SaaS security scanner that audits any website across four engines — transport/TLS, HTTP security headers, cookie flags, and information exposure — scores the result, and generates a downloadable PDF report. Try the live demo below.
4 scan engines
fsociety-web — ArmanXploits Cybersecurity Lab
A dark terminal-aesthetic cybersecurity hub — CTF writeups, a live in-browser toolbox (encoder, hash identifier, CVE lookup, regex tester), pentest checklists, and an interactive OWASP Top 10 reference. Try the live demo below.
4 live tools
Personal Portfolio Website
This site — a responsive portfolio scoring 95+ on Google Lighthouse across all four categories, with a Serverless Resend API contact form backend, full SEO optimization, and hand-tuned performance. Try the live demo below.
95+ Lighthouse
Disease Prediction System
A Streamlit prototype rebuilt into a real client-server product — FastAPI backend serving a Random Forest + ExtraTrees ensemble across 41 diseases and 133 symptoms, with SHAP explainability and one-click PDF reports, fronted by a custom dark medical-tech UI. Try the live demo below.
41 diseases · SHAP-explained
TripBoss Travel Website
Smart travel assistant with search, currency converter, translator, weather, and Wikipedia-powered city summaries. MySQL backend for preferences and history.
5 integrated APIs
IndusTrust Bank
A console-based Java/JDBC banking app, rebuilt from scratch into a session-authenticated Spring Boot service with a real double-entry ledger, row-locked transfers, and BigDecimal money. Try the live demo below.
23 REST endpoints
Student Management System
A legacy Java Swing + Oracle desktop app, rebuilt from scratch into a deployed Spring Boot web platform — paginated records, a live analytics dashboard, CSV export, and a hardened, tested, CI/CD'd REST API. Try the live demo below.
11 REST endpoints
GrabMedia — Instagram & YouTube Downloader
A full-stack media downloader — paste a public Instagram or YouTube link, preview it, pick a quality, and download. An Express backend proxies two separate RapidAPI providers so the API key never reaches the browser. Try the live demo below.
Dual-platform · zero client-exposed API keys
Locked Project
This project is encrypted. Enter the 4-digit passcode to unlock.
Live Demo
See the scanner run
A stripped-down, in-browser demo of SiteShield — my multi-tenant web security scanner. Enter any domain and watch it grade transport security, HTTP headers, cookies, and information exposure, live.
How this works: the URL is parsed live in your browser; header, cookie and TLS findings illustrate SiteShield's methodology (no third-party servers are contacted here). Run the full engine on your own site → SiteShield on GitHub.
Skills
Technical toolkit
Education
Academic background
Certifications
Credentials & achievements
Writing
Thoughts & tutorials
Technical write-ups on cloud, DevOps, and ML — things I wish existed when I was learning them.
How I Built an In-Browser Secret Scanner: Client-Side Entropy & Heuristic Pattern Matching
A technical deep-dive into building zero-dependency, high-throughput secret detection directly in the browser using Shannon entropy heuristics, compiled regex tokenizers, and Web Worker thread isolation.
Anatomy of a Supply Chain Attack: Lessons from SolarWinds to Modern CI/CD
Breaking down how attackers compromise build pipelines through poisoned dependencies, unpinned GitHub Actions, and artifact tampering — and how defenders enforce SLSA provenance and cryptographic signing.
Zero Trust Architecture in Practice: Moving Beyond the Perimeter
A practical walkthrough of implementing Zero Trust principles — identity-aware proxies, microsegmentation, and least-privilege IAM — with real AWS and Kubernetes workload configurations.
Contact
Let's work together
Let's Connect
I'm open to internship opportunities, project collaborations, and general conversations about cloud, DevOps, or anything tech. Drop a message below.
Reach out directly
Prefer a direct line? All channels below.
Response time: I typically reply within 24 hours. For urgent matters, LinkedIn DMs are fastest.
