Aspiring DevSecOps Engineer | Python & Automation
I am a Software Developer in training (Final Year / AP2 2027) with a clear mission: Building secure, automated infrastructures.
While my training focuses on solid software development fundamentals, I specialize in DevSecOps workflows. I believe in a "Security-Left" mindset and use Python and modern CI/CD practices to automate manual tasks.
My Philosophy: "Practice over theory. Build, break, fix, and secure."
-232F3E?style=flat-square&logo=amazon-aws&logoColor=white){kind=icon}
-green?style=flat-square&logo=mediafire){kind=icon}
Offline-first web app to structure and track learning topics for the German IT exam.
- Tech: HTML5, Vanilla JS, Tailwind CSS.
- Status: Production / Maintenance Mode.
🧪 DevSecOps Coursework & Labs [Planned]
Collection of automation scripts, Docker configurations, and security challenges (Bandit/OverTheWire).
- Goal: Documenting my practical learning curve from Linux basics to Cloud Security.
A Python-based backend service with Dockerized CI/CD and security scanning.
- Focus: Demonstrating a secure supply chain pipeline (SAST/DAST/SBOM).
Structured learning path alongside my formal training.
| Phase | Focus Area | Key Goal | Status |
|---|---|---|---|
| 01 | Foundations & Certs | Linux Deep Dive & ISC2 CC Certification | 🔄 In Progress |
| 02 | Code & Algorithms | Python MOOC 2026 & Pytest workflows | 📅 Planned Q1 |
| 03 | Cloud & Containers | AWS Cloud Quest & Docker Security | 📅 Planned Q2 |
| 04 | Security Pipeline | GitHub Actions & Security Tools (Trivy/Bandit) | 📅 Planned Q3 |
| 05 | IaC & Enforcement | Terraform & Policy-as-Code | 📅 Planned Q4 |
- 2027 (Feb): 🏁 Final Exam Part 2 (AP2) - Fachinformatiker Anwendungsentwicklung
- 2026 (Feb): 🚩 Intermediate Exam Part 1 (AP1)
- 2026 (Target): 🏆 ISC2 Certified in Cybersecurity (CC)
