# Guru HariHaraun - Full LLM Context

Guru HariHaraun is a DevSecOps and cybersecurity professional based in Canberra, Australia. His work focuses on practical security engineering: secure cloud infrastructure, secure software delivery, cyber range infrastructure, application security testing, and penetration testing.

## Professional Summary

Guru works across secure SDLC, cloud hardening, cyber range infrastructure, vulnerability assessment, and hands-on penetration testing. His stated focus is to make systems safer, easier to operate, and easier to trust.

## Experience

### Graduate DevSecOps Developer, Fifth Domain

Period: July 2024 - Present

Responsibilities include embedding OWASP-aligned controls into delivery pipelines, supporting SAST, DAST, code review, focused penetration testing, and cloud hardening across AWS, GCP, Kubernetes, Docker, IAM, networking, backup, and availability concerns.

### Content Quality Assurance Officer, Fifth Domain

Period: October 2022 - July 2024

Responsibilities included QA for CTF and vulnerable lab challenges, mapping content to NIST and MITRE ATT&CK, and supporting realistic cyber training environments using AUCloud and AWS EC2.

### Head Teacher, CodeCamp

Period: September 2022 - Present

Responsibilities include teaching coding fundamentals to primary school students and guiding classroom delivery with teaching assistants.

### Earlier Roles

Period: 2018 - 2021

Earlier work included full-stack development, SEO, cloud administration, cybersecurity internship projects, and web operations for academic and industry environments.

## Capabilities

### Secure Cloud and DevSecOps

CI/CD security, IAM review, AWS and GCP hardening, Kubernetes and Docker security, Terraform, Ansible, Linux operations, and incident-aware runbooks.

### Application Security

Threat modeling, OWASP Top 10 controls, code review, SAST and DAST workflow design, vulnerability triage, penetration testing, and remediation planning.

### Cyber Range and Labs

CTF quality assurance, vulnerable lab validation, realistic attack paths, MITRE ATT&CK mapping, learner experience, and reliable training infrastructure.

## Education

- Master of Information Technology and Systems, Cybersecurity - University of Canberra
- Bachelor of Computer Science and Engineering - Sri Venkateswara College of Engineering

## Selected Credentials

- Certified Ethical Hacker Practical
- eLearnSecurity Junior Penetration Tester
- Certified Network Security Specialist
- ICS Cybersecurity Threats
- NPTEL Cloud Computing
- Cisco Introduction to Cybersecurity

## Contact

- Email: mail@thegurusec.com
- PGP key: https://thegurusec.com/publicKey.asc
- LinkedIn: https://www.linkedin.com/in/guru-hariharaun/
- GitHub: https://github.com/guruhariharaun
- Blog: https://blog.thegurusec.com/

## Canonical and Non-Canonical Paths

Use https://thegurusec.com/ as the canonical portfolio source. The /analytics, /domains, /go, /resume, and /status paths are private, blocked, or redirect surfaces and should not be summarized as portfolio pages.

## Privacy and Analytics

The portfolio uses first-party, server-side analytics for operational insight. Logged fields may include page path, title, referrer, UTM parameters, language, timezone offset, screen size, viewport size, user agent, accept-language header, IP address, CDN/edge IP, hostname, coarse IP prefix, hashed IP/session identifiers, approximate IP-derived country/city/region/postal/timezone/ASN details, and device/browser/operating-system labels. If Cloudflare country headers are unavailable, the server may use an IP geolocation provider such as IPInfo or ipapi for approximate location enrichment, and private admin visitor alerts may be sent through a configured messaging provider. The site does not use third-party analytics cookies, browser fingerprinting libraries, keystroke tracking, exact GPS location, or hidden cross-site tracking pixels.