Security Engineer with 5+ years of experience across application security, cloud security, vulnerability management, incident response, and security automation. Focused on building scalable security solutions, conducting architecture reviews, and driving measurable risk reduction across web applications, cloud & hybrid network architecture and 3rd party vendor engagements.
Application Security
Threat Modeling • Secure Architecture Reviews • Secure SDLC • Code Reviews • WAF Security
Cloud Security
AWS • Azure • GCP • Wiz
Identity & Access Management
SSO • OIDC • OAuth 2.0 • SAML • Identity Federation • RBAC • Least Privilege
Zero Trust Security
ZTNA • Network Segmentation • Micro-Segmentation • Access Policy Enforcement
Cryptography
TLS • PKI • Certificate Lifecycle • Encryption Standards • Key Management
Incident Response & Monitoring
SIEM • Splunk • Detection Engineering • Security Logging • Threat Investigation
Vulnerability Management
Risk Prioritization • Remediation Programs • Security Assessments
Networking & Infrastructure Security
TCP/IP • DNS • VPN • Secure Network Architecture • Hybrid Cloud Connectivity
Identity & Access
1Password • LastPass • IAM Platforms • Identity Federation
Detection & Monitoring
Splunk • SIEM Platforms • Log Analysis • Alerting
Cloud Security
AWS Security Hub • GuardDuty • CloudTrail
Application Security
WAF • Secure API Integrations • DevSecOps Pipelines
