Devsecops Engineer
CurrentTasked with implementing pipeline vulnerability scanning - using WizCLI on with Jenkins, triaging critical vulnerabilities to drive enhanced security, creating an identity governance solution - leading to comprehensive auditing of application permissions. This backend involved a containerised Python FastAPI in running AWS ECS, interactive with a Redis Cache, database and Active Directory; while the front end involved a React TypeScript application store in S3. Both required Github Actions to containerise the backend and deploy the React app. Further projects include data loss prevention via custom Slack integration with Mimecast, automation of KPI metrics, end of life tech monitoring and code security monitoring. Involved in training through paired programming and the creation of a Security Champions programme.Since the incorporation of Networking into the DevSecOps team, the responsibility to monitor and maintain FortiGate firewalls, VPNs and cloud networking including AWS Transit Gateways and VPN endpoints. This has provided a unique opportunity to gain invaluable experience into a new perspective within both Tech and Security.