As an Information Security Engineer, I am passionate about creating resilient security frameworks and staying ahead of emerging threats. My experience spanned application security, cloud security, and incident response, with a focus on proactive defense and continual improvement.In my role, I led our security regression testing process using Nuclei, adding and testing templates for newly disclosed vulnerabilities. This approach provided continuous protection and reinforced the reliability of our defenses.A key project involved enhancing asset management with JupiterOne and Orca Security. By creating dashboards that showed asset ownership and tag compliance, I worked with teams to address tagging gaps, ultimately improving asset visibility and system organization.In parallel, I joined the AWS Audit team to reduce costs and minimize security risks. By identifying redundant assets and collaborating with teams to remove or re-provision them, we significantly reduced monthly expenses and noise in our security tools, making the environment both cost-effective and safer.To maintain organization, I deployed Cloud Custodian to enforce a mandatory tagging policy for newly created resources. With Lambda function triggers, we automatically validated tags on creation and alerted teams to discrepancies—ensuring a consistent, manageable asset structure.I was also deeply engaged in incident response. In one major incident, I responded to a large-scale AdRoll account takeover by developing alerts to detect suspicious behaviors and suspending compromised accounts. I led efforts with our ad review team to identify malicious ads and introduced mandatory 2FA, stopping further account compromises.In another incident, I helped remediate the exposure of our Datadog API keys by coordinating with teams to rotate or delete 350+ keys and secure them within our system. This effort strengthened our security posture and mitigated further risk.Through each of these experiences, I developed a strategic, collaborative approach to security and a strong ability to navigate complex challenges. I remain committed to building security practices that are both resilient and adaptable to evolving threats.