Worked closely with the other software engineers, systems engineers (dev ops), and product managers to design and build a security meta-scanner and vulnerability management product for verifying the security of DNS, websites, and other services related to domains hosted under the .trust TLD. Built a service oriented architecture deployed onto AWS EC2 while working with technologies like Ruby on Rails, Go, and Puppet.
Led efforts to design and build the product’s core authentication and authorization functionality, to implement encryption of sensitive customer data, and to roll out TLS between all services. Ensured that product's web applications were built with a high level of security.
Maintained and updated the .trust Technical Policy — a set of security best practices and requirements for domains hosted under a new, security-focused, top-level domain. Acquired a deep understanding of newer security technologies and standards to determine how to best update the policy and to inform an advisory board for approval of the proposed changes.
Established and implemented the Secure Development Lifecycle for the division. Educated other developers about a variety of security topics, performed code reviews, and coordinated penetration tests.
