Featured project
SentinelFlow
Security event triage service that ingests multi-source events, normalizes inconsistent payloads, and groups related alerts into incidents.
- Built the API and worker flow in Python/FastAPI, separating event intake, normalization, incident grouping, persistence, and summary generation.
- Deployed containerized services on AWS ECS with SQS for asynchronous processing, S3 for raw event archival, and RDS PostgreSQL + pgvector for storage and similarity search.
- Implemented AI-generated incident summaries and recommended remediation steps while maintaining automated validation and fallback logic.
Python FastAPI AWS ECS SQS S3 RDS PostgreSQL pgvector Docker GitHub Actions pytest CloudWatch