- Lead security engineering for the Python/Django/React application, including code reviews, threat modelling, and security design reviews.
- Own static analysis, dependency scanning, secret scanning in CI, and triage of findings.
- Coordinate penetration testing and red-team testing, and drive remediation of findings.
- Partner with engineers to set secure coding standards and provide practical guidance.
- Secure staff identity and access, including SSO/MFA enforcement, onboarding and offboarding, access reviews, and auditable platform access.
- Collaborate with the Platform team to secure AWS, including IAM, network architecture, secrets management, and compute and data layers.
- Define and automate infrastructure security baselines, including container security and CI/CD pipeline integrity.
- Build and maintain detection capabilities, and manage incident response from triage through post-incident review.
- Contribute to SOC 2 compliance, vendor and customer security assessments, risk communication, and security documentation.
- Define the security roadmap, represent security in architecture decisions, mentor staff, report on security posture, and advise on internal IT and physical security initiatives.
PythonDjangoReact