Hi, I am Joshua Jebaraj

Devops/Automation|

Cloud/Cloud Native Security
Devops/Automation

Joshua Jebaraj

Security Researcher at Independent.

Joshua Jebaraj is Creator of GCP-Goat .He had also Spoken at conferences like Black-hat,Defcon,Owasp-Seasides,Bsides-Delhi,Hack in the box etc.

Skills

Programming Languages

Capable of writing programs using Golang,Python,Bash.

Devops Skills

Proficient in Linux and Networking.Experienced in Docker and Kubernetes.Skilled in Gitlab and Github CI/CD pipeline.Proficient in Infrastructure as Code (IAC) tools like Terraform and Ansible

Cyber Security

Basic proficiency in Securing CI/CD pipelines(DevSecOps) and Intermediate knowledge in Cloud(GCP) and Cloud Native Security(Kubernetes)

Experiences

Cloud Engineer

arch0

September 2023 - Feb 2024, Remote

From robust identity alignment to seamless operations, enjoy comprehensive protection tailored to your unique needs.

Responsibilities:

Architected and implemented end-to-end CI/CD automation using Terraform, Terragrunt, and GitHub Actions, reducing deployment time by 70% and eliminating manual errors across 20+ Cloud Services.
Researched and implemented Google Cloud Platform integration for the arch0 Platform including writing documentation for setup, writing backend code in the Golang and testing the integration.
Created a suite of automated internal tools and an AI-powered chatbot to enhance team efficiency .

Cloud Native Researcher

we45

July 2021 - August 2023, Remote

The Application Security Specialists.

Responsibilities:

Created the Initial version of the GCP-Sandbox which allows to create the sandbox environment for the clients.
Researched and created the training material for the appsecengineer on the various Kubernetes security concepts like Admission controller, Supply chain security etc
Lead the GCP Research team and created completely new learning courses on GCP security at appsecengineer.
Conducted cloud security audits for the various client using open source tools and help them to identify security misconfigurations and helped them to fix the misconfigurations

Devops Intern

Atlan.

August 2020 - December 2020, Remote

Atlan is a modern data workspace that helps data teams collaborate and democratize their enterprise data

Responsibilities:

Responsible for deploying the application in Kubernetes
Introduced the Security best practices for deploying the application in Cloud Native

Intern

Practical DevSecOps.

September 2019 - May 2020, Remote

Practical DevSecOps (a Hysn Technologies Inc company) offers vendor-neutral, practical, and hands-on DevSecOps training and certification programs for IT Professionals.

Responsibilities:

Created the Docker Security Course Content
Helped in creating the DevSecOps University Project

Intern

Appsecco.

May 2019 - June 2019, Banglore

Appsecco provides practical security advice and help to safeguard your organisation. Our team can help protect against all possible security risks.

Responsibilities:

Learned Mobile(Android) Security , Web Security (Owasp-top-10) and Cloud Security(AWS)
Learned to work with Docker,Git.

Projects

GCP GOAT

Creator August 2021 - Present

GCP-Goat is intentionally vulnerable GCP environment to learn and practice GCP Security

Devops Upgrade

Creator April 2023 - Present

Get devops resources in a single click!

Securing CI/CD

Creator May 2021 - Present

In this project I have tried to implement the Security in the CI/CD pipeline

Terraform Learning

Creator May 2021 - Present

In this project I have created small project around terraform

Kubernetes Shell

Creator May 2021 - Present

Kubectl shell is the Kubernetes-plugin which helps to get shell inside the container/pods

Ansible-role

Creator April 2021 - Present

Ansible role to install the Gitea

Docker-clean

Creator May 2021 - Present

A CLI tool which helps to remove the docker Images

Docker-secrets

Creator Nov 2021 - Present

A CLI tool which helps to remove the docker Images

GCP-Enum

Creator April 2021 - Present

GCP enum is the tool that helps to find the existence of the GCP buckets. This might be helpful during the pentesting or recon.

Recent Posts

Introduction to GCP IAM for AWS Professionals

Hey Folks one of the common problem that I have seen people switching from the AWS to GCP is to understand the IAM in GCP. Though most of the concepts are similar there are a quite bit difference in few important concepts. In this blog we will try to understand the IAM in the GCP world what are the things that are similar and what are the things that are different.

March 21, 2025 Read

Understanding Firewalls in GCP

Firewalls in GCP Hey folks! It’s been years since I wrote a blog. In this post, we will learn about the basics of firewalls in GCP and the various types of firewalls available in the Google Cloud Platform. What is a Firewall? Before we dive in, let’s try to understand what a firewall is in the first place. According to Wikipedia: In computing, a firewall is a network security system that monitors and controls incoming and outgoing network traffic based on configurable security rules.

March 13, 2025 Read

One year at we45

It’s been a year since I started working at we45. In this blog, I am gonna share my working experience at we45 Opportunity I have been following we45 since my college days when I started to explore DevSecOps. During my final year when I started looking for a job, I reached out to Abhay and ask him whether there are any openings in we45, to my luck, there are some openings and I applied for the same.

June 1, 2022 Read