Conducted internal security audits of production web applications and infrastructure.

Identified misconfigurations and vulnerabilities, and proposed practical remediation strategies.

Hardened Linux servers using:

• Firewall rules
  
  

• Secure SSH policies
  
  

• File permission controls
  
  

• System monitoring (auditd, fail2ban)

• Designed and deployed secure web applications featuring:
  
  

  1. Role-Based Access Control (RBAC)
     
     

  2. Secure session management
     
     

  3. Encrypted sensitive fields
     
     

  4. Comprehensive audit logging
     
     

• Automated deployment, backups, and security checks using Python and Bash.
  
  

• Integrated and securely deployed Pocket HRMS, reducing manual administrative work by ~80%.