Book
Security Engineering
Four chapters on the security work that is not about AI: cryptographic choices with one right answer each, the vulnerability classes that actually cause breaches and their structural fixes, the cloud misconfigurations that appear in nearly every incident report, and detection engineering with the first hour of a response.
Written for engineers rather than for a certification. Every fix here addresses the class rather than the instance, and every claim says how you would verify it.
CHAPTER 1
Cryptography for engineers who are not cryptographers
Eight decisions, one right answer each, and the rule that prevents almost every real-world failure.
CHAPTER 2
The vulnerability classes that still matter
Not the top-ten list. The five classes that actually cause breaches, what each looks like in code, and the fix that addresses the class rather than the instance.
CHAPTER 3
Cloud security: the misconfigurations that actually cause breaches
Identity is the perimeter now. The five findings that appear in nearly every cloud breach report, and how to make each one structurally impossible.
CHAPTER 4
Detection engineering, and responding to what you find
Writing detections as code, tuning without going blind, and the first hour of an incident.
CHAPTER 5
Threat modelling that produces decisions
Forty minutes, a whiteboard, and four requirements in a ticket — not a document nobody reads.
CHAPTER 6
Two threat models, worked
The practice from the previous chapter applied to a retrieval chatbot and a refund API — the diagram, the boundaries, and the tickets that came out.
CHAPTER 7
Container and Kubernetes security
What a container actually isolates, the four settings that remove most of the risk, and the cluster permissions that are administrator in disguise.
CHAPTER 8
Control frameworks, and what an auditor actually wants
NIST, SOC 2, ISO 27001 and PCI from first principles — what each is for, how a control is tested, and where the whole apparatus turns into theatre.
CHAPTER 9
Incident response and threat hunting
What actually happens during an incident, the containment decision nobody wants to make live, and how hunting differs from waiting for an alert.
CHAPTER 10
Risk and controls, and the three lines
The governance model every regulated organisation runs on — the vocabulary from scratch, one control walked end to end, and where it turns into theatre.
CHAPTER 11
Operational resilience
Not uptime — the discipline of staying inside a limit when something actively breaks you, and the regulatory frame that now demands you prove it.
CHAPTER 12
Security regulation in India
CERT-In, the DPDP Act and the sectoral regimes — what actually binds you today, what arrives in 2027, and what changed underneath the banks in July 2026.