Security Engineer
CurrentMember of the Enterprise Security team within the Information Security (InfoSec) organization. Alternate between project work and weekly "goalie" rotations that involve reviewing project design documentation, deployment plans, architecture diagrams, firewall and infrastructure change requests, etc. Consultant for IT teams to ensure secure deployments, configurations, and strategies.Involved in nearly every facet of enterprise security:Endpoint, container, Kubernetes, network, and cloud security, vulnerability management, PKI, IAM, and zero trust.Developed, documented, and deployed a modular, serverless solution to automatically remediate high-priority misconfigurations of cloud resources and notify relevant parties via custom Slack bot. Built using infrastructure as code applied via CI/CD pipeline. Assisted co-workers implement additional auto-remediation capabilities via modular design.Developed vulnerability notification system that alerts configured recipients upon detection of relevant vulnerabilities according to assets defined in a backend database. Many more features planned for future releases...https://github.com/airbnb/vulnture