Cyber Security Engineer
Current• Executing technical audits of infrastructure configurations to ensure the compliance with industry standards (CIS benchmarks, ISO 27001, SOC2)• Conducting comprehensive OWASP Dependency check scanning to identify vulnerabilities in third-party libraries• Performing Docker image / container scanning to ensure secure orchestration• Performing network scanning using Nessus to identify potential weaknesses in the network architecture• Automating vulnerability management by integrating Qualys into CI/CD pipelines• Conducting patch management scanning to mitigate the risks of known vulnerabilities by security patches• Responding to security incidents• Automating daily security processes using Python and Jenkins
Jun 2022 - Present
