Resume

Available for cloud security roles

Neel
Moradiya

Cloud Security Engineer · AWS · New York

I secure AWS environments: least-privilege access, segmented networks, and detective controls that catch problems before they become incidents.

View work →Contact me

01

Projects

InternetAWS WAF Custom VPC 10.0.0.0/16 · 2 Availability Zones Public subnets Private subnets ALBNAT GatewayBastion /32 App EC2RDS · KMS app-sg ← alb-sg only3306 ← app-sg onlyegress via NAT
AWS labAug 2026

SecureCart · AWS Security Architecture Redesign

Took an intentionally insecure e-commerce stack (public EC2, internet-facing RDS, public S3) and rebuilt it as a segmented, private architecture.

Details
  • Custom VPC across two AZs with private app and database tiers behind an ALB
  • Chained security groups and a /32-restricted bastion
  • Private, encrypted RDS; S3 Block Public Access and default encryption
  • AWS WAF managed rules validated against SQL injection payloads
VPCIAMALBRDSKMSAWS WAF
1Phishing2Credential dump3RDP / SSH4PsExec5Exfiltration6Backup wipe7Ransomware 8 days of attacker dwell time · 5 systems · 6 accounts · 27 ATT&CK techniques
Threat hunting labJan 2026

Threat Hunt · The Azuki Breach Saga

Reconstructed a simulated eight-day ransomware intrusion end to end using KQL over endpoint telemetry.

Details
  • 91 flags investigated across four parts
  • 5 systems and 6 accounts traced, including 2 backdoor accounts
  • 27 MITRE ATT&CK techniques across 12 tactics
  • Timelines, IOC lists, and remediation plan
Defender for EndpointKQLLog AnalyticsMITRE ATT&CK
Total 30 6Critical 3 0High 9 1Medium 17 4 First scanAfter six scans
Vulnerability management labDec 2025

Vulnerability Management Program

Ran a full program on Azure VMs: policy, credentialed scans, prioritization, change control, remediation, and risk acceptance.

Details
  • Credentialed Tenable scans with just-in-time AD credentials
  • Total findings down 80% over six scans (30 to 6)
  • Critical findings down 100%, high down 89%
  • Documented risk acceptance for an unpatchable CVE
TenablePowerShellAzureRisk management

02

About

I am a cloud security engineer focused on AWS. On my current contract I support the security and day-to-day management of a healthcare client’s AWS environment, covering identity and access, network security, encryption, logging, monitoring, backup, and recovery.

Before that I spent 13 months as a Cloud Engineer at Diversity Infotech, building VPC architectures and supporting EC2 workloads for small and medium-sized businesses. I hold an MS in Cybersecurity from Yeshiva University, and I keep sharpening my detection and response skills through hands-on threat hunting labs with Microsoft Defender for Endpoint and KQL.

12+SMB clients supported on AWS
200+EC2 workloads supported
91flags investigated in one threat hunt
80%fewer findings after remediation

03

Experience

Mar 2026 – Present

AWS Cloud Security Engineer (Contract)

Independent Contractor, Confidential Healthcare Client · New York, NY
  • Design and maintain security controls across AWS covering IAM, network security, encryption, logging, monitoring, backup, and recovery.
  • Implement and continuously review least-privilege IAM and separation of duties to reduce unnecessary access.
  • Run detective controls with CloudTrail, CloudWatch alarms, GuardDuty, Security Hub, and AWS Config, and remediate misconfigurations and public exposure.
Dec 2022 – Dec 2023

Cloud Engineer

Diversity Infotech · Surat, India
  • Built 7+ custom AWS VPC architectures with public and private subnets, NAT, and controlled security group relationships for 12+ SMB clients.
  • Supported 200+ EC2 workloads with load balancing, scaling, monitoring, and recovery.
  • Managed IAM permissions and security controls across S3, RDS, and AWS Organizations; used CloudTrail and CloudWatch for investigation.
Sep 2022 – Nov 2022

Cloud Infrastructure Intern

Diversity Infotech · Surat, India
  • Supported cloud deployment, user access, and monitoring; troubleshot connectivity and permission issues.

04

Skills

Cloud security

7

AWS IAM and IAM Identity CenterOrganizations and SCPsVPC design and segmentationKMS and encryptionAWS WAFCloudFront with OACSecrets Manager

Monitoring and detection

7

CloudTrailCloudWatchGuardDutySecurity HubAWS ConfigAmazon InspectorVPC Flow Logs

Threat hunting and vulnerability

5

Microsoft Defender for EndpointKQLAzure Log AnalyticsTenable (Nessus)MITRE ATT&CK

Automation and systems

6

TerraformPythonPowerShellWindows and Windows ServerLinuxActive Directory

Frameworks

5

NIST CSFCIS BenchmarksOWASP Top 10CVE/CWECVSS

05

Credentials

Certifications

CompTIA Security+CompTIAValid through Nov 2028
AWS Certified Cloud PractitionerAmazon Web ServicesValid through Dec 2028
AWS Certified Solutions Architect AssociateAmazon Web Services
In progress
AWS Certified Security SpecialtyAmazon Web Services
In progress

Education

Master of Science in CybersecurityYeshiva University, Katz School of Science and Health2024 – 2026 · GPA 3.7. Degree conferred January 2026.
Bachelor of Computer ApplicationsSRK University2020 – 2023

06

Security

The table below is not a claim. Your browser just asked this page for its own response headers, and this is what came back.

Checking headers…

07

Contact

Let's work together.

contact@neelmoradiya.com

LinkedInGitHubResume