Selected wins
Real estate firm: hardened Google Workspace, DMARC live, phishing down 60% in 4 weeks.
Healthcare office: HIPAA gap review, device hardening, password rollout.
SMB portfolio: DNS fixes, TLS upgrades, risk trending to green.
Projects
Experience
Cloud Security Engineer — Lululemon
Vulnerability management across AWS estates; SLA-driven remediation and reporting.
- Risk-based triage (exploitability, blast radius)
- Partnered with teams to land fixes on time
Wiz
Prisma Cloud
AWS Security Hub
Product Security Engineer — Posit
Secured web apps and SaaS with a practical SDLC.
- Threat models, secure design reviews, code review checklists
- SAST/DAST gates, ticketed fixes, partner with product/eng
OWASP
SAST/DAST
Jira
Cloud Security Engineer — Twilio
DevSecOps and process automation for secure delivery.
- CI/CD checks for secrets, policies, IaC risks
- Guardrails in pipelines without slowing delivery
Terraform
CloudFormation
Jenkins
GitHub
CodeBuild/Deploy/Pipeline
Cloud Security — Amgen (contract)
Helped protect intellectual property and sensitive R&D data.
- Access controls, data handling standards
- Close work with security and legal teams