EmilAlizada/devsecops-pipeline
DevSecOps Pipeline
A secure delivery reference project combining Django, Docker, GitHub Actions, SAST, dependency auditing and container vulnerability scanning.
Security Engineering · Baku, Azerbaijan
I work across offensive security, DevOps and backend engineering—then turn that overlap into secure, testable systems with visible engineering decisions.
Proof in public
Four focused repositories connect my security, infrastructure and backend experience. Each project documents architecture, threat assumptions, implementation choices and automated checks.
github.com/EmilAlizada ↗EmilAlizada/devsecops-pipeline
A secure delivery reference project combining Django, Docker, GitHub Actions, SAST, dependency auditing and container vulnerability scanning.
EmilAlizada/secure-django-api
JWT authentication, short-lived access tokens, owner-scoped authorization, throttling, PostgreSQL and tests that prove cross-user data isolation.
EmilAlizada/kubernetes-security-lab
Restricted Pod Security, non-root workloads, seccomp, capability dropping, default-deny networking, resource governance and regression tests.
EmilAlizada/python-security-toolkit
An installable defensive CLI for file integrity, SHA-2 hashing, HTTP security-header review, IOC extraction and authentication-log analysis.
A three-layer perspective
My background sits at the intersection of offensive security, infrastructure and backend engineering.
That combination gives me a practical way to look at systems from multiple angles: where trust boundaries break, how delivery pipelines behave, and how application code and data fit into the wider security picture.
My internships covered authorized penetration testing, practical DevOps work involving containerization and CI/CD, and backend development with Python, Django and PostgreSQL. The public repositories above extend those areas into reviewable engineering work.
Hands-on, across the stack
Three technical internships built three complementary views of modern engineering: security assessment, infrastructure operations and application development.
CyberON · Baku
Performed authorized manual penetration testing on web applications and systems, identified and reported vulnerabilities, contributed to Red Team-style testing, and used automated and manual security tooling.
Ordulu Teknoloji A.Ş. · Baku
Worked through practical DevOps simulations covering containerization, CI/CD pipelines, Infrastructure as Code, monitoring, logging, cloud platforms and Kubernetes.
Baku Design Academy · Baku
Developed a web application using Python and Django, worked with PostgreSQL, implemented backend functionality, and collaborated across the full development lifecycle.
Offensive security
Manual and automated testing focused on web application security, vulnerability discovery, reporting and adversarial thinking.
2022 — 2026 · EQF Level 6
Coursework covered offensive and defensive security, malware analysis, digital forensics, web and database security, secure programming, cryptography, cloud security, networking, operating systems, ICS security, mobile and wireless security, machine learning and ISMS.
Overall Band 6.5 · CEFR B2
Azerbaijani · Turkish C1 · English B2/C1 · German A1
Work beyond the terminal
International volunteering, event operations and cross-cultural communication are part of how I work with people—not just systems.
Started as a volunteer and later joined organizing staff, contributing to event coordination and teamwork for the SDG Youth Forum.
Participated in a sustainable-development project in Germany focused on environmental work and maintenance of local natural areas.
Assisted visitors in Baku’s Old City during Formula 1 and Novruz activities, communicating with tourists from different countries.
07 / Contact
I’m open to opportunities in cybersecurity, DevOps and secure backend engineering.