June 2025 – November 2025
Munich, Germany
Cloud/DevSecOps Intern
Excellence Cloud
- Implemented DevSecOps security baseline for ISO 27001 compliance in a Kubernetes (GKE) environment
- Configured CI/CD security gates with GitHub Actions, SonarQube, and Semgrep across 5 repositories
- Built 4 Grafana dashboards for real-time vulnerability tracking and security observability
- Enforced zero-trust networking with Kyverno policies and default-deny NetworkPolicies
- Applied service mesh encryption (Istio mTLS) and automated container scanning with Trivy
- Kubernetes
- GKE
- GitHub Actions
- SonarQube
- Semgrep
- Grafana
- Kyverno
- Istio
- Trivy