Shoban Chiddarth ShobanChiddarth

Introduction

I am a GNU+Linux user with a strong interest in Cybersecurity, particularly Security Operations, Detection Engineering, and Cloud Security. I also enjoy Linux Administration, Network Engineering, and Cloud/DevOps Engineering. I enjoy building hands-on labs and security tooling to understand how systems work and how they can be secured. I am currently in my final year of college and open to internships.

Skills and Tools

Security Operations: Wazuh SIEM, threat detection, FIM, alert triage, n8n SOAR
Detection Engineering: SigmaHQ rule authoring, OpenSearch, log analysis
Cloud Platforms: AWS
Cloud Security: AWS IAM, Security Groups, NACLs, CloudTrail, S3 bucket policies
Infrastructure as Code: Terraform
CI/CD: GitHub Actions
Programming: Python (FastAPI, scripting, automation), Bash
Containers & Virtualization: Docker, VirtualBox
Version Control: Git, GitHub
Operating Systems: Linux (daily driver, server administration, VPS hardening), Windows
Network Engineering: TCP/IP, DNS, DHCP, Subnetting, Routing, Switching
Network Security: pfSense, Pi-hole, Wireshark

Labs

Title	Description
Wazuh SIEM Lab	Set up a lab with Wazuh server and 2 endpoints (Windows, Debian) that have Wazuh agents Configured File Integrity Monitoring in the Windows Wazuh Agent and ingested logs from the agents to the server Generated security-related events and queried the resulting logs based on attack type Extended it with a SOAR layer using n8n to send email notifications when File Integrity changes are detected
ettercap MITM Lab	Set up a lab environment with Kali Linux "attacker" VM and Debian desktop "victim" VMs Poisoned the ARP tables of the router and the victims to send all traffic through the attacker Used Wireshark to capture traffic generated by the lab victims and demonstrate credential exposure when traffic was transmitted without encryption Documented mitigation steps for individuals, network admins and website admins, as well as the true purpose of HTTPS
Physical Network Engineering Home Lab	Repurposed an old Tenda AC6 router and a ThinkCenter M81 desktop to create a personal LAN Enforced network isolation to connect only my devices to my LAB network and guest devices to the home router Converted the ThinkCenter M81 into a Linux server and installed pi-hole for network-wide ad and malicious domain blocking Implemented local HTTPS using mkcert for secure connection to the pi-hole config page
Cisco Packet Tracer CCNA Learning Labs (from jeremy's course)	Repo that contains multiple Cisco Packet Tracer labs. Refer to README of that repo.
Superior VM Intercommunication	Created a lab template for virtual labs in VirtualBox Used pfSense as a virtual router to act as an internet gateway for VirtualBox's virtual networks (like Host-only or Internal) Created "base" VMs in VirtualBox with an OS installed, which can be cloned when I need a VM of that OS instead of installing an OS from scratch every time

Projects

Title	Description
SigmaDojo	Created TryHackMe-style labs to teach Sigma rule authoring as a Detection Engineering skill Added a custom rule interpreter to query synthetic log datasets Added optional export to Splunk SPL or Sentinel KQL syntax
ResumeOps	CI/CD for your Resume Lets you maintain several versions of your Resume in plain text files so you can version control them in Git Implements GitOps to automatically convert to .pdf files Saves time spent in manually exporting and managing Resumes
telegram-proxy-server-aws	Deployed an MTProto proxy for Telegram on AWS to route Telegram client traffic through a self-managed server Configured the proxy to listen on TCP port 443, a port commonly associated with HTTPS traffic Provisioned the AWS infrastructure using Terraform, making the deployment reproducible and easy to redeploy
nat-instance-aws-terraform	Created an AWS architecture to replace AWS NAT Gateway with a self-managed NAT instance Saved ~$420/month for a ~$300/GB egress infrastructure Saved the architecture as a Terraform repo for reusability
Containerized openssh-server	Created a Docker container to host an OpenSSH server instance for LAN file transfer Enforced SSH authentication for LAN file transfers, providing confidentiality through SSH's encrypted communication Reduced the SSH service's exposure window by running it as an ephemeral container that is removed after the transfer.
randomised_mac_linux	Created a script to spoof the MAC address of real network interfaces in a Linux desktop Integrated the script with systemd to run on boot Automated MAC address randomization to reduce exposure of the device's persistent hardware address on local networks.

Open Source Contributions

SigmaHQ/sigma

PR	Opened on	Status	Description
6618	Jul 8, 2026	Pending Merge (1 human maintainer approved, 1 more required for merge)	Contributed a Sigma rule to detect if "Block Public Access" settings of AWS S3 buckets were weakened (buckets made public)

logpy/logpy

PR	Opened on	Status	Description
85	Oct 23, 2025	Merged	Fixed python collections module import statements as per new version 3.10+

jazzband/prettytable

PR	Status	Opened on	Description
186	Jun 1, 2022	Merged	Added `None` annotation to `__init__` functions

numpy/numpy

PR	Status	Opened on	Description
21692	Jun 8, 2022	Merged	Minor contribution: file renaming
20949	Jan 31, 2022	Merged	Minor contribution: file renaming

Navigation Menu

Shoban Chiddarth ShobanChiddarth

Achievements

Achievements

Organizations

Block or report ShobanChiddarth