Senior DevSecOps/Security Mentor

I'm a DevOps engineer (up to 3 years, AWS/Terraform/CDK/Python/Docker) specialising into DevSecOps. I'm working through a structured, hands-on programme building a real security portfolio, and I'm looking for a senior DevSecOps engineer to mentor me through it - sharing real project experience, building alongside me, and sharpening my judgement. What I'm actively building (and want guidance on): Secure CI/CD & supply chain - GitHub Actions OIDC to AWS (secretless auth), SHA-pinned actions, IaC scanning with Checkov and Trivy, secrets scanning with Gitleaks, SBOMs (CycloneDX), image signing with Cosign AWS security engineering - Amazon Inspector, GuardDuty response runbooks, Security Hub (CIS v3.0.0), IAM least-privilege, KMS, Secrets Manager, boto3 automation for findings triage Application security - SAST (Semgrep + custom rules), DAST (OWASP ZAP), IAST (Contrast), and understanding what each catches that the others miss Kubernetes security, RBAC, Pod Security Standards, Kyverno admission policies, NetworkPolicies, kube-bench, Falco runtime detection, External Secrets Operator / IRSA Detection & evidence - log ingestion into ELK, detection rules, threat modelling, and mapping controls to CIS / SOC 2 / ISO 27001 What I want from a mentor: Real hands-on project experience - I want to work through actual builds with you, not just talk theory. Pairing on real pipelines, infrastructure, and security tooling, and learning from projects you've shipped Structured sessions with clear progression, not ad-hoc Q&A Honest review of my real code, pipelines, and architecture decisions including my triage/justification discipline (why I fixed, suppressed, or accepted a finding) Help building senior-level judgement: scoping work, knowing when to pause for a sanity check, and framing decisions to stakeholders