Above the Cloudline
To defend a system you must first learn to take it apart. Offense is not the opposite of safety — it is its rehearsal.
$
Kernel-level offense, cloud-native defense — I build systems that live on the boundary between creation and destruction.
I'm Mohammed Yasin — a security engineer & digital architect. Five years shipping cloud-native platforms across Golang, Rust, Kubernetes, and eBPF, from kernel-level research to enterprise architecture.
05+
Years in production
11
Systems shipped
∞
Kernel → Cloud
3
Themes · try “t”
// 01 · background
Background & working style
I build systems that are not just functional, but extraordinary — where security meets elegance and infrastructure becomes invisible.
With five years engineering cloud-native platforms at scale, I work fluently across Golang, Rust, Kubernetes, and eBPF. My range runs from kernel-level security research to enterprise cloud architecture — and I design every system to push the boundary of what's possible without ever losing sight of the people who depend on it.
Engineering
- Cloud-Native Architecture
- Distributed Systems
- Kernel Engineering
- Runtime Security
Approach
- Research-first
- Adversarial thinking
- Ship & measure
- Document the why
// 02 · philosophy
Two studies
The Invisible Floor
The best infrastructure disappears. When the kernel, the network, and the runtime all hold, the work that remains is the only work that ever mattered.
// 03 · experience
Work history
Application Developer — IBM
- Built geospatial services and location management in Golang — haversine calculations, zone mapping, and real-time tracking for delivery-routing optimization.
- Designed a distributed database architecture with PostgreSQL/PostGIS, YugabyteDB for high availability, and Redis caching for sub-millisecond location queries.
- Authored OpenAPI/Swagger specifications and GitHub CI/CD pipelines for automated deployments and consistent API documentation.
Software Engineer (A2) — EPAM Systems
- Designed Kafka topic architecture and Golang consumer services for video ingestion — partitioning, batch processing, and fault-tolerant handling for high-throughput streaming.
- Engineered PostgreSQL schema and query optimization for video metadata and analytics through strategic indexing, query refactoring, and connection pooling.
- Architected resilient Golang microservices with Kubernetes auto-scaling, improving production reliability and operational efficiency.
Senior Software Developer — Infosys (via Artech)
- Engineered high-performance Golang microservices for a large-scale banking platform, ensuring secure and efficient financial transactions.
- Orchestrated deployment and scaling of banking services on OpenShift and Kubernetes, optimizing Docker containerization for resource utilization and reliability.
- Implemented inter-service communication over gRPC and REST APIs, and collaborated with front-end teams on user-centric UI integration.
Cyber Security Engineer — AccuKnox
- Developed Golang security solutions — Kubernetes controllers and operators — for AWS, GCP, and Azure using K8s CRDs, Linux, and Docker.
- Implemented eBPF-powered monitoring tools to detect and mitigate security threats in real time across containerized infrastructure.
- Architected scalable cybersecurity frameworks and system policies, integrating DevSecOps across the software development lifecycle.
// 04 · professional projects
Client systems
01
Geospatial
Kroger
Location & geospatial services for Kroger's delivery network — real-time routing and zone optimization with haversine math over a distributed PostgreSQL/PostGIS + YugabyteDB store and Redis caching.
02
AI Video
P&G
AI-driven video analytics platform — real-time visual pattern detection across media and surveillance feeds, built on Kafka ingestion and Golang consumer services with a PostgreSQL analytics layer.
03
Cloud Platform
Bank of America
Self-service cloud provisioning platform letting internal banking teams deploy containerized workloads on a secure microservices architecture, with compliance guardrails baked into every deployment path.
04
Runtime Security
AccuKnox SaaS + KubeArmor
Runtime security enforcement for the AccuKnox SaaS platform and the open-source KubeArmor engine — workload hardening, sandboxing, and least-permissive policies via LSMs (BPF-LSM, AppArmor).
view repo↗
// 05 · open-source projects
Independent systems
01
AI Security
RedHands
An MCP server exposing offensive-security tooling to AI agents — autonomous reconnaissance, exploitation, and reporting through a standardized protocol interface.
view repo↗
02
Kernel Research
Aegis-Shadow
A dual-module eBPF research framework demonstrating offensive rootkit techniques alongside defensive runtime auditing — a controlled environment for Linux-kernel exploration.
view repo↗
03
Security Tooling
KubeDagger
An eBPF-based offensive toolkit for network discovery, process hiding, and container breakouts — built for stealthy red-team assessments of Kubernetes environments.
view repo↗
04
AI Safety
NeuronTrace
Kernel-level behavioral containment for AI agents using eBPF and LSM — monitoring and restricting autonomous actions at the syscall layer before they touch the system.
view repo↗
05
Firmware Security
Barzakh
A Ring-4-to-Ring-0 firmware research platform that pairs real-world bootkit techniques with matching detection engines — a closed loop modeling threats like BlackLotus, LogoFAIL, and CosmicStrand so every attack is both reproducible and detectable.
view repo↗
06
Kernel & WASM
Warmor
A security enforcer pairing eBPF syscall monitoring with WebAssembly-based policies — kernel-level observability and portable, cross-platform workload protection in one engine.
view repo↗
07
Telecom Security
StaticZero
An eBPF-based telecom security research framework spanning 2G through 5G — intercepting and analyzing cellular protocols with paired offensive tooling and defensive detection for rogue towers, downgrade attacks, and IMSI catchers.
view repo↗
// 06 · toolkit
The instrument set
- T.01GolangBackend & systems
- T.02RustKernel & safety-critical
- T.03eBPF / LSMRuntime observability
- T.04KubernetesOrchestration at scale
- T.05WebAssemblyPortable policy engines
- T.06gRPC / ProtobufService contracts
- T.07PostgreSQL / RedisData & caching
- T.08AI / ML SystemsAgents & containment