Recruiter summary

Aman Agarwal

Security engineering · Applied AI

MIS senior at Iowa State University with a Cybersecurity Engineering minor and CompTIA Security+, and a former cybersecurity intern at HNI Corporation. I build security controls and AI-powered tools and test them against real systems. Looking for entry-level roles in security engineering, security operations or identity and access management, and AI engineering or automation roles, starting January 2027.

Experience

Cybersecurity Intern, HNI Corporation

May–July 2026 · Muscatine, Iowa

Selected projects

AccessOps

Public source and demo · Signed release

Automated employee offboarding that proves the person's access is really gone, across Microsoft Entra ID (test tenant), Keycloak and an Active Directory-compatible directory.

  • 2.6 s from the HR event to the person signed out and their tokens blocked
  • 6 gaps found by live testing, from a surviving group membership to Kerberos tickets valid for 10 hours, each fixed or documented
  • 20 s for Entra to confirm the change; 32 s to catch a sign-in after someone has left
Python / Django / PostgreSQL / React / Keycloak / Microsoft Entra ID / OPA

SignalBridge

Public source · Signed release

A detection lab that catches access that should have ended, tested against real Keycloak, Wazuh, OWASP ZAP and Shuffle.

  • Found and fixed a race that let a removed user make 4 writes
  • 5 detection rules written as Sigma, SPL and KQL and run in Splunk and a Kusto emulator
  • Opens a critical case when an account offboarded by AccessOps is used again
Python / Django / PostgreSQL / Docker / Wazuh / Keycloak / Sigma

BetTail

Live · Private source

A live web app where private groups share sports picks and see profit, ROI and leaderboards calculated in the database.

  • Every request runs as the signed-in user under row-level security; no admin database key in the app
  • My security review found and fixed 6 issues, including a NULL that skipped a guard and a CSV export open to formula injection
  • Shows AI research reports from Downfield, published through a report-only credential
TypeScript / Next.js / PostgreSQL / Supabase

Netted

Deployed beta · Private source

A personal-finance app for trade profit, shared funds and budgeting, built from a spreadsheet and accounting rules I wrote first.

  • MFA enforced inside the database, so the API can't skip it
  • Security assessment for non-technical decision makers and a 7-item risk register with owners and due dates
  • All 506 journal records restored from an encrypted backup, hash-matched
TypeScript / Next.js / PostgreSQL / Supabase

Downfield

Running locally · Private source

A local AI research agent that turns game, injury, news and weather data into structured NFL reports for BetTail.

  • Covered 32 games across two NFL weeks so far, with 415 saved reports from pregame forecasts to postgame grades
  • Code checks every report for schema, arithmetic and cross-player totals before it's published
  • Versioned forecasts, graded against final stats after each game
  • Runs with 2 allowed tools and no app secrets; web pages treated as untrusted
Node.js / JavaScript / JSON Schema / Claude

Toolkit

Identity & access
  • Keycloak: OIDC, SCIM, MFA
  • Microsoft Entra ID and Graph
  • Samba AD: LDAPS, Kerberos
  • OPA and Rego
  • Shared Signals: CAEP, RISC
Detection & response
  • Cortex XSIAM
  • Wazuh SIEM
  • Sigma rules
  • Splunk SPL
  • KQL
  • Shuffle SOAR
  • Proofpoint TRAP and DLP
  • VirusTotal
  • OWASP ZAP
Cloud security
  • Microsoft Azure
  • Wiz Security Graph
  • Rego cloud controls
Engineering
  • Python
  • Django
  • PostgreSQL
  • TypeScript
  • React
  • Next.js
  • Supabase
  • Docker
Delivery
  • GitHub Actions
  • CodeQL and dependency review
  • Signed releases with SBOM
Applied AI
  • LLM agents (Claude)
  • Structured output with JSON Schema
  • Tool and environment allowlists
  • Source provenance

Education & credentials

Iowa State University

B.S. Management Information Systems
Minor in Cybersecurity Engineering
Expected graduation:

Credentials

  • CompTIA Security+, –
  • Microsoft Applied Skills: Secure Azure storage
  • Wiz Cloud Core training

Each case study links its test runs, code and limits. Project index and code excerpts ↗

Case studies and evidence: aman-agarwal6.github.io