🎤 Speaker • 🏆 Hackathon Enthusiast • 🌍 Open to Remote Opportunities

name: Farhan Ashraf
role: AISecOps Engineer @ Systems Ltd
location: Pakistan

what_i_do:
  - Securing Generative AI Systems (guardrails, model safety)
  - Cloud Native Security (Kubernetes, OpenShift, Docker)
  - DevSecOps Pipeline Automation
  - Security Observability, Threat Detection & Response (OpenTelemetry)

passionate_about:
  - 🎤 Speaking at tech conferences & meetups
  - 🏆 Building cool stuff at hackathons
  - 📚 Creating open-source learning resources
  - 🤝 Collaborating on security projects

currently_learning:
  - 🧠 Advanced AI & Custom Model Training
  - 🤖 LLM Fine-tuning & Architecture
  - 🛡️ AI Security (Adversarial ML)
  - ⚡ High-Performance Model Serving

open_to:
  - Remote roles in DevSecOps / Cloud Security
  - Speaking opportunities
  - Open source collaborations
  - Hackathon teams

Selected work framed as Situation → Task → Action → Result, with project-level reach separated from the direct outcome of each change.

• 🔥 90DaysOfCyberSecurity — Creator

  • Situation: Cybersecurity beginners faced a broad, fragmented learning landscape without a practical sequence to follow.
  • Task: Turn the core skills into an approachable, day-by-day path from fundamentals to hands-on security work.
  • Action: Created and continue to maintain a free 90-day roadmap spanning networking, Linux, Python, traffic analysis, ELK, cloud, and ethical hacking.
  • Result: The roadmap has earned 18.8k+ stars and 2.1k+ forks, demonstrating sustained global discovery and community reuse.
  • 

• 🧠 AWS IA Terraform Bedrock — Merged PR #162

  • Situation: The reusable module lacked image-filter guardrails and typed coverage for newer Bedrock Cloud Control resources, leaving configuration gaps and weaker validation.
  • Task: Bring the module's guardrail and resource schemas in line with current Bedrock capabilities.
  • Action: Added image-filter support, strongly typed guardrail inputs, automated-reasoning policies, and broader Cloud Control schema coverage.
  • Result: Teams can define text and image safeguards with earlier validation and better IDE guidance; the capability is now available in a module with 119k+ Terraform Registry downloads.

• 🤖 AWS IA Terraform AgentCore — Merged PR #20

  • Situation: AgentCore gateways had no first-class Terraform support for request and response Lambda interceptors.
  • Task: Make gateway-boundary controls reusable without requiring teams to wire Lambda access manually.
  • Action: Implemented validated interceptor configuration, outputs, documentation, and automatic Lambda invoke permissions.
  • Result: Teams can add authorization, payload transformation, PII masking, and policy enforcement at the gateway boundary through a module with 21k+ Terraform Registry downloads.

• 🛡️ OWASP DevSecOps Guideline — Merged PR #98

  • Situation: Legacy repository paths contained |, a Windows-reserved character that prevented a complete working-tree checkout on Windows.
  • Task: Remove the contributor-access barrier without changing the guideline's content or breaking other platforms.
  • Action: Renamed the invalid paths and updated the affected files consistently across the repository.
  • Result: Windows users can now obtain a complete checkout, removing this prerequisite barrier to contribution. That matters on an OS reported by 49.5% of professional-developer respondents in Stack Overflow's 2025 survey, for an OWASP project with 1.1k+ stars and 260+ forks.

• 🔭 CNCF Inspektor Gadget — Merged PR #5721

  • Situation: The default Prometheus annotation targeted legacy port 2223 while the OpenTelemetry metrics listener used 2224, sending discovery to the wrong endpoint.
  • Task: Restore correct default metrics discovery and keep generated deployment paths aligned.
  • Action: Corrected the scrape port and regenerated the Helm and kubectl gadget deploy manifests.
  • Result: Default Prometheus discovery now targets the live metrics endpoint across both installation paths in a 2.9k+ star / 370+ fork CNCF project whose instrumentation also underpins Microsoft Defender for Containers.

Reach figures checked 1 September 2026. Downloads, stars, and forks indicate project scale—not the number of users who consumed a specific change.

I love sharing knowledge! I regularly speak at:

• Tech Conferences - Cloud, Security, DevOps topics
• University Events - As a GitHub Campus Expert
• Meetups & Workshops - Hands-on security training

💡 Interested in having me speak at your event? Reach out!