Security
Threat and vulnerability management with Nessus, Prowler and Kali Linux
John Efraim Meraña · Kidlat
DevOps, backend and
cloud security on AWS.
I work in L2 support and DevOps, after working in application security and on serverless backends on AWS. I'm based in the Philippines. Kidlat is the name I use for my own projects.
AWS Serverless
Lambda, API Gateway, DynamoDB, Amazon Connect and CDK
End to End
From the database schema and tests to deployment, backups and restore drills
About
Background
I currently work in L2 support and DevOps. Before that I was on an enterprise application security team, doing security reviews of cloud architectures and vulnerability assessments, and I built Lambda and Amazon Connect backends for contact centers.
I also build complete applications on my own. The two case studies below are a security operations tool that replaced a spreadsheet and hand-made Jira tickets, and a medical records system for small family clinics.
I build and ship with AI coding agents (Claude Code).
AWS Lambda
API Gateway
DynamoDB
Amazon Connect
AWS CDK
Java & Spring Boot
TypeScript & React
PostgreSQL
Nessus
Prowler
Claude Code
Case studies
Selected work
Security · AWS serverless · Built alone
Security Operations Manager
Thousands of findings from Nessus, CIS benchmarks and ISD scans lived in a spreadsheet, and every Jira ticket was made by hand. I built the web app that imports them, tracks SLAs and creates the tickets.
ReactTypeScriptLambdaDynamoDBCDK
Read the case study →
Health data · Java · Built alone
Medical records for small family clinics
An EMR for solo and small family medicine clinics in the Philippines, where health data is sensitive personal information under the Data Privacy Act. Clinic isolation, audit history and prescriptions printed on the clinic's own paper.
Java 21Spring BootPostgreSQLHTMXAWS
Read the case study →
Services
What I've worked on
Serverless backends on AWS
APIs and event-driven services on Lambda, API Gateway and DynamoDB, including Amazon Connect contact-center backends, deployed with infrastructure as code.
Cloud security reviews
Security reviews of cloud architectures against the AWS Well-Architected Framework, and vulnerability assessments with Nessus, Prowler and Kali Linux.
Internal tools
Web apps that import data from existing tools and replace spreadsheet and manual ticket work, like the Security Operations Manager.
Credentials
Badges and accreditations
AWS Well-Architected Proficient
AWS Partner: Technical Accredited
AWS Partner: Generative AI Essentials
AWS Partner: Cloud Economics Essentials
Cyara Certified Expert (Platform, IVR and CX testing)
Cisco Cybersecurity Essentials
Status: available
Open to roles and freelance projects
Full-time roles and freelance work in AWS backend, serverless and cloud security.
Contact
Get in touch
johnefraimmerana@gmail.com
LinkedIn
Credly badges
For a project, send a short description of the problem and your timeline. For a role, a link to the job post is enough.