$ cat about.txt

Welcome to my website. Here you'll find my blog where I share knowledge on cybersecurity and IT-related topics. A little bit about me:

I've spent 11+ years in enterprise IT, with ~5 years in cybersecurity. Currently securing a hybrid multi-cloud environment for a large enterprise as a Senior Security Engineer, much of it through mergers, acquisitions, and rapid expansion: environments that refuse to sit still. I came up through the ranks of PC Specialist and SysAnalyst to SysAdmin, and then Security Engineering. I protect infrastructure, identities, and applications with the perspective of someone who spent years designing, building, and running them in addition to managing and supporting the user experience.

Though I'm well-versed across many security domains I have a particularly growing interest in Application Security and DevSecOps. I love to build things so I also dabble in web and software development in my free time. It scratches the itch to understand all aspects of the technologies the world runs on, from creation and runtime to operations and delivery.

$ cat approach.txt

Experience has taught me the value of adaptability. Businesses are rarely static in their operations: Priorities shift with continuous-improvement initiatives and changing organizational goals, causing attack surfaces and risk exposure to expand or contract as a result. Layering on an organization’s culture, toolset, regulatory compliance requirements, and risk appetite (all of which also change constantly) commands adaptability to switch tools and controls effectively, pick the right ones, master them swiftly, and build custom solutions that fit the organization in front of you. This is what I thrive on.

Solutions that slow the business down or significantly inconvenience users tend to be met with resistance and drive some to try and route around them. So I aim to build controls that people can live with while focusing where risk genuinely concentrates in the environment and automating the rest. All that said, I am not attached to any particular tool, but am quick to pick up and master what's given to me.

$ ls focus-areas/

• Network and Cloud Security
• Detection Engineering
• IAM
• Zero Trust
• Incident Response
• AppSec
• Digital Forensics

$ grep -i "impact" worklog.txt

• scaled automated identity lifecycle from ~100 to 300+ applications through M&As and organic growth — manual identity operations down ~80%
• led a Zero Trust transformation that retired the VPN; reduced lateral-movement paths down ~70% through app segmentation
• engineered Zero Trust SASE access and identity federation between two companies during an active M&A — unblocked joint procurement operations and helped enable ~$50M in additional revenue
• built and tuned WAF coverage for 100+ internet-facing workloads, with rulesets that block real attacks without paging anyone about false positives
• engineered SIEM/SOAR detections, enrichment pipelines, and automated response for the same IR playbooks I get paged on — nothing keeps detection quality honest like being the person woken up by it
• incident response lead for high-severity incidents: analysis, containment, and keeping everyone calm at 2 a.m.

$ cat certs.txt

CCSP · CNSP (CySA+, Pentest+, Security+) · CIOS (Network+, A+) · ITIL v4 · Project+ · MCSA

# verify authenticity:
→ credly.com/users/haris-karabegovic

$ which contact

github: @Haris-Karabegovic · linkedin: linkedin.com/in/haris-k-470003429/