I build cloud systems and the security tooling around them, from least-privilege AWS infrastructure to GRC automation that maps controls across NIST CSF, ISO 27001 and Essential Eight.
I'm currently building UniLinq and studying software engineering at Monash, graduating in 2027. Before that I spent four years in regulated manufacturing, where good systems were the ones with evidence and accountability built in.
Maps controls across 3 frameworks (NIST CSF, ISO 27001 and Essential Eight) and generates client-ready risk registers. It runs on local LLMs, so there are no ongoing API costs.
Python, Ollama, NIST CSF, ISO 27001, Essential Eight
View on GitHubInfrastructure as code with least-privilege IAM and encryption at rest and in transit as first-class concerns. Aligned to NIST SP 800-53 and CIS AWS Foundations.
Terraform, IAM, KMS, Lambda, DynamoDB
View on GitHubA two-sided marketplace matching university students with small and medium businesses for scoped, project-based work. Live, and currently in trial with 3 SMEs.
Next.js, NestJS, Supabase, Gemini
Visit unilinq.orgA journal for tracking and reviewing discretionary trades and strategy adherence. Features strict multi-user data isolation and secure authentication via an automated CI/CD pipeline.
React, TypeScript, Firebase, Vercel
View on GitHub2022 to 2026
Managed risk minimisation and quality control under regulatory compliance frameworks and Standard Operating Procedures.
Expected 2027
Open to graduate roles, internships, and conversations about cloud security, GRC, or the tools in between.
© 2026 Nathan Nunes
