Security Engineer
Current- Developed automated security solutions leveraging Python and bash scripts, resulting in a 50% reduction in response time to security incidents. Enhancements included: -> Detection and auto-remediation of cloud infrastructure misconfigurations -> Improved search capabilities within audit logs -> Identification of Route53 subdomains susceptible to subdomain takeover attacks- Conducted 20+ risk assessments, evaluating system/data flow diagrams and new infrastructure designs across multiple engineering teams, serving as a key security point of contact for over 5 teams.- Led comprehensive security review of NerdWallet's AI Chatbot, analyzing the use of generative AI and spearheading the formulation of company-wide policies governing AI utilization.- Managed and executed initial triage for security alerts and incidents, serving as the primary on-call responder and key point of contact for efficient incident resolution.- Developed project plan and designed solution for a comprehensive software asset inventory based on requirements gathered through stakeholder engagement