Security Engineer

Security Engineer with strong experience in cloud security, secure software development, identity and access management, cryptography, security architecture, threat modelling, and automated security controls. Experienced in partnering with engineering teams to embed security throughout the Software Development Lifecycle (SDLC), develop secure‑by‑default solutions, and automate security assessment and remediation ong focus on leveraging cloud‑native technologies, automation, AI/ML, and Dev Sec Ops  practices to continuously identify, prevent, and remediate security risks.

• Cloud & Infrastructure Security
• Security Architecture & Secure‑by‑Design
• Identity & Access Management (IAM)
• Authentication & Authorisation
• Cryptography & Key Management
• Threat Modelling & Risk Assessment
• Secure Coding & Code Review
• Application & API Security
• Dev Sec Ops  & CI/CD Security
• Security Automation & Security Guardrails
• Vulnerability Management & Remediation
• Preventive & Detective Security Controls
• Continuous Security Assessment
• Security Testing
• AI/ML‑Assisted Security
• Security Monitoring & Threat Detection
• Incident Response
• Security Governance & Risk Management
• Self‑Service Security Platforms & Tooling

• Designed, implemented, and maintained automated security guardrails and secure‑by‑default controls across cloud environments and enterprise platforms.
• Partnered with software engineering and development teams during the ideation, architecture, and design phases to identify security risks early and embed security into applications and services.
• Provided security architecture guidance, threat modelling, and recommendations for secure application, infrastructure, identity, and data designs.
• Conducted secure code reviews and security assessments, identifying vulnerabilities and providing practical remediation guidance to development teams.
• Developed automated security assessment capabilities to replace manual, point‑in‑time security reviews with continuous security validation and assurance.
• Built and implemented preventive and detective security controls to continuously monitor, identify, and mitigate security risks.
• Collaborated directly with developers to implement security fixes, reusable security patterns, and pave‑road solutions, making secure development the easiest development path.
• Developed scalable, self‑service security tooling that enabled engineering teams to identify, assess, and remediate vulnerabilities without creating dependencies on central security teams.
• Integrated security controls into the Software Development Lifecycle (SDLC), including security design reviews, threat modelling, secure coding, vulnerability assessment, and security testing.
• Automated security processes using scripting and programming, improving the scalability, consistency, and efficiency of security operations.
• Applied knowledge of industry‑standard vulnerabilities, attack techniques, and remediation strategies to strengthen application and cloud security.
• Worked collaboratively with security, engineering, architecture, and platform teams to define and execute long‑term security strategies.
• Supported security incidents and contributed to incident response activities, ensuring effective investigation, containment, remediation, and preventative improvements.
• Leveraged AI/ML tools and techniques to accelerate security assessments, automate threat detection, improve vulnerability triage, and enhance security analysis and code review workflows.
• Explored and implemented AI‑native security practices to improve the scalability and effectiveness of security engineering processes.
• Promoted security automation and engineering…