Security Engineer

Implemented organization-wide security practices and tooling, including Trivy, Trufflehog, and GitHub security features.

• Researched exploits using the EPSS framework and conducted penetration tests on feature releases.
• Built a centralized vulnerability management solution and enforced least-privilege access controls.
• Led SOC 2 and ISO 27001 compliance efforts.
• Managed the GitHub organization migration and strengthened deployment security with ArgoCD.
• Triaged bug bounty reports and ran security awareness training.