Home/Work/№ 17

17 · Security & Systems

MMTC — Security & Infra Hardening at Scale

A real security-operations engagement that reduced attack surface and brute-force noise and left behind playbooks and monitoring.

PeriodClient engagementStatusDeliveredAreaSecurity & Systems

Highlights

  1. Layered brute-force defence: cloud security groups, host UFW/iptables and log-aware bans; VPN/bastion and IP allow-lists.
  2. Auth hygiene (per-role accounts, key-preferred auth, MFA, audit logging), service-exposure review, WAF-style CVE rules.
  3. Central auth-log monitoring, brute-force detectors and a rapid triage playbook per alert.