Hey there 👋 I'm Kumar Ashwin

🛡️ Cloud & Supply Chain Security | 🔐 Usable Security Advocate | 🧠 AI + Automation Enthusiast

---

🚀 About Me

> whoami
Security Engineer | Builder | Trainer | Hacker-in-Residence

I'm a hands-on security engineer focused on solving real-world problems with code, context, and creativity. I enjoy building tools, teaching practical security, and shaping secure systems across development pipelines and cloud-native environments.

• 🛠️ Working at the intersection of code, infra, and security
• 📚 Regularly speak & train at conferences like BlackHat, DEFCON, x33fcon, and Nullcon
• 🧪 Building hands-on labs and CTFs
• 🤖 Exploring AI-powered automation to reduce toil for security teams
• 🔍 Helping teams scale secure engineering practices without slowing down developers

---

🔐 Areas of Focus

• ☁️ Cloud Security — Misconfigurations, IAM, least privilege, Resilience
• 🔄 Supply Chain Security — From Developer to Deployment
• ⚙️ Automation — Tooling, Pipelines, Remediation, Zero Touch
• 🧠 Security Enablement — Usability, Secure defaults, Guidance

---

🧰 Tech Stack

---

🧭 Guiding Principles

• Break it until you understand it.
• Design for defenders, not just auditors.
• Build secure systems that's usable.
• Good security scales, teaches, and disappears.

---

📬 Get in Touch

Working on something at the crossroads of security engineering, automation, or hacking something?
Ping me on LinkedIn or X — always up for a good security chat.