Above the Cloudline
To defend a system you must first learn to take it apart. Offense is not the opposite of safety — it is its rehearsal.
12.9716° N · 77.5946° E
Bengaluru · India
Issue 01 — Vitals
00 — Index
Mohammed Yasin
05+
Years in production1
08
Systems shipped2
∞
Kernel → Cloud
01
Background & Working Style
¶ Background
I build systems that are not just functional, but extraordinary — where security meets elegance and infrastructure becomes invisible.
With five years engineering cloud-native platforms at scale, I work fluently across Golang, Rust, Kubernetes, and eBPF. My range runs from kernel-level security research to enterprise cloud architecture — and I design every system to push the boundary of what's possible without ever losing sight of the people who depend on it.
Engineering
- Cloud-Native Architecture
- Distributed Systems
- Kernel Engineering
- Runtime Security
Approach
- Research-first
- Adversarial thinking
- Ship & measure
- Document the why
02
Philosophy
Two studies
The Invisible Floor
The best infrastructure disappears. When the kernel, the network, and the runtime all hold, the work that remains is the only work that ever mattered.
03
Experience
Work history
Backend Engineer — Kroger
Architected real-time delivery routing and zone-optimization services with haversine geospatial math and a distributed datastore — millions of location queries daily at sub-50ms latency.
Cloud Engineer — Bank of America
Built a self-service provisioning platform for containerized workloads on a secure microservices architecture, with compliance guardrails baked into every deployment path.
04
Selected Work
Independent systems
01
B.01 · Plate I
RedHands
An MCP server exposing offensive-security tooling to AI agents — autonomous reconnaissance, exploitation, and reporting through a standardized protocol interface.
02
B.02 · Plate II
Aegis-Shadow
A dual-module eBPF research framework demonstrating offensive rootkit techniques alongside defensive runtime auditing — a controlled environment for Linux-kernel exploration.
03
B.03 · Plate III
KubeDagger
An eBPF-based offensive toolkit for network discovery, process hiding, and container breakouts — built for stealthy red-team assessments of Kubernetes environments.
04
B.04 · Plate IV
NeuronTrace
Kernel-level behavioral containment for AI agents using eBPF and LSM — monitoring and restricting autonomous actions at the syscall layer before they touch the system.
05
B.05 · Plate V
Barzakh
A controlled white-hat UEFI bootkit simulation for academic research and defensive detection engineering — helping defenders understand firmware-level persistence in the wild.
06
B.06 · Plate VI
Warmor
A security enforcer pairing eBPF syscall monitoring with WebAssembly-based policies — kernel-level observability and portable, cross-platform workload protection in one engine.
05
Toolkit
The instrument set
- T.01GolangBackend & systems
- T.02RustKernel & safety-critical
- T.03eBPF / LSMRuntime observability
- T.04KubernetesOrchestration at scale
- T.05WebAssemblyPortable policy engines
- T.06gRPC / ProtobufService contracts
- T.07PostgreSQL / RedisData & caching
- T.08AI / ML SystemsAgents & containment