MSc Cyber Security @ BTU Cottbus-Senftenberg

Brook Belihu Duressa

Security Engineer — Building detection systems, cloud security pipelines, and open-source security tooling.

01 — About

Background

I'm a Master's student in Cyber Security at BTU Cottbus-Senftenberg, with a background in software engineering. Before pivoting into security, I co-founded Pulse ERP — building full-stack systems from the ground up taught me how production software actually breaks.

Now I apply that engineering foundation to security: building detection pipelines, writing custom SIEM rules mapped to MITRE ATT&CK, and designing cloud security infrastructure with Terraform and AWS. I'm particularly interested in the intersection of deterministic detection engineering and AI-assisted security operations.

Based in Germany. Looking for Werkstudent opportunities in security engineering, cloud security, or DevSecOps — Berlin hybrid or remote across Germany.

02 — Projects

What I've Built

SOC Homelab Detection Lab

Full SOC environment with Wazuh SIEM, custom detection rules mapped to MITRE ATT&CK, and incident response reporting.

SOC homelab architecture: Mac M1 host with UTM Windows and Ubuntu VMs sending telemetry to Wazuh in Docker
WazuhSysmonMITRE ATT&CKDetection EngineeringDockerIncident Response

GuardPost — Cloud AI Detection Pipeline

Terraform-provisioned AWS threat detection with AI-assisted triage using Claude API.

GuardPost pipeline architecture: GuardDuty ingestion through normalization, enrichment, clustering, and AI triage
TerraformAWSGuardDutyPythonAI TriageCloud Security

SignalFuse — Multi-Source Incident Correlation Engine

In Progress

Open-source tool correlating security events across Wazuh, GuardDuty, and Falco into unified incidents.

Open SourceCorrelation EngineFastAPIDetection Engineering

03 — Skills

Technical Stack

Security

WazuhSysmonauditdMITRE ATT&CKGuardDutyDetection EngineeringIncident Response

Cloud & Infra

AWSTerraformDockerLinux

Development

PythonFastAPINode.jsGit

AI

Claude APILLM Integration for Security Operations

04 — Contact

Let's Connect

Looking for a Werkstudent role in security engineering or cloud security in Germany. Let's connect.