Currently building a security agent to conduct context-based secure code reviews for software applications at Amazon.
Past accomplishments:
•Architected an event-driven security automation system that continuously validates the security compliance posture of over 100K applications by ingesting code and infrastructure scan results, eliminating a full day of manual scans per review and accelerating the delivery of secure applications
•Drove the development of Kotlin-based AWS Lambda functions that process scan results and deliver them to Amazon’s security review platform, partnering with infrastructure scanning and security review teams to enable a cross-service integration that provides engineers with real-time visibility into their applications’ security posture
•Defined and led execution of the integration testing and CI/CD strategy for a distributed, asynchronous security automation system, implementing critical tests and delegating others to ensure continuous integration of all workflows before production deployment
•Established a reusable Infrastructure-as-Code library in CDK that encapsulates AWS services into secure-by-default event-driven architecture patterns, reducing infrastructure code, enforcing data security, and enabling developers to focus on system architecture over infrastructure details
