Nimal Kurien Thomas
security & engineering

I work across the stack — securing infrastructure, hunting threats, breaking applications, and building intelligent systems.

Based in College Park, MD. Open to relocation and remote.

GitHub ↗ LinkedIn ↗ Résumé ↗
OffSec Certified Professional+ (OSCP+) OSCP+ OffSec Certified Professional (OSCP) OSCP HTB Certified Offensive AI Expert (HTB COAE) HTB COAE AWS Certified Solutions Architect – Associate AWS SAA CompTIA Security+ ce Certification Security+

Experience

Role title Organisation

A line or two on scope and what you were responsible for.

—
Role title Organisation

A line or two on scope and what you were responsible for.

—

Education

Degree University

Focus area, thesis, or relevant coursework.

—
Degree University

Focus area, thesis, or relevant coursework.

—

Work

Cloud & Cloud Security

Securing cloud-native environments — IAM, posture management, and runtime defence.

Projects

Projects for this area are on the way.

Platforms

  • AWS (primary)
  • GCP
  • Kubernetes / EKS
  • Terraform / Pulumi
  • Cloudflare

Focus

  • IAM & least-privilege
  • CSPM & posture management
  • Cloud workload protection
  • Serverless security
  • CIS benchmarks / SOC2

DevOps / DevSecOps

Shifting security left — baking it into pipelines, containers, and delivery workflows.

Projects

Projects for this area are on the way.

Tools

  • Semgrep / SonarQube
  • Trivy / Grype
  • Checkov / Terrascan
  • Falco
  • Vault (HashiCorp)

Practices

  • Threat modeling
  • Supply chain security (SLSA)
  • Policy-as-code (OPA)
  • SBOM generation
  • Secure IaC (Terraform)

Pentesting

Offensive security — finding the holes before the adversary does.

Projects & write-ups

Projects for this area are on the way.

Tools

  • Burp Suite
  • Metasploit
  • Nmap / Masscan
  • BloodHound / SharpHound
  • Impacket

Domains

  • Web app pentesting
  • Active Directory attacks
  • Network enumeration
  • Privilege escalation
  • Report writing

ML / AI

Applying machine learning to security problems and building intelligent systems.

Projects

Projects for this area are on the way.

Stack

  • Python / PyTorch / scikit-learn
  • HuggingFace Transformers
  • LangChain / LlamaIndex
  • FastAPI
  • MLflow

Focus areas

  • Security-focused ML
  • LLM red-teaming
  • Anomaly & intrusion detection
  • NLP for threat intel
  • Adversarial ML

API Security

Designing, securing, and stress-testing APIs — from spec to production.

Projects

Projects for this area are on the way.

Tools & specs

  • Burp Suite (API testing)
  • Postman / Insomnia
  • OpenAPI / Swagger
  • GraphQL
  • gRPC / Protobuf

Areas

  • OWASP API Top 10
  • Auth patterns (OAuth2, JWT)
  • Rate limiting & abuse prevention
  • API fuzzing & testing
  • REST & async API design

Binary Exploitation

Memory corruption, reverse engineering, and turning crashes into control.

Projects & write-ups

Projects for this area are on the way.

Tools

  • GDB / pwndbg
  • pwntools
  • Ghidra / IDA
  • radare2
  • AFL++ / libFuzzer

Areas

  • Stack & heap overflows
  • Return-oriented programming
  • Format string bugs
  • ASLR / NX / canary bypass
  • Shellcode development

DFIR

Digital forensics and incident response — finding what happened, how, and when.

Projects

Projects for this area are on the way.

Tools

  • Autopsy / FTK
  • Volatility 3
  • Velociraptor
  • Elastic / Splunk
  • Wireshark / Zeek

Areas

  • Windows forensics (MFT, registry)
  • Memory analysis
  • Malware triage
  • Network traffic analysis
  • Chain of custody