Proven ability to operate and tune cloud security posture tooling at enterprise scale, including policy customization, alert lifecycle management, and cross-team remediation workflows • Hands-on experience investigating and remediating hardcoded secrets in production repositories, including credential rotation, commit-history remediation, and prevention strategy design.
- Demonstrated skill in reviewing IaC templates for security misconfigurations and writing specific, developer-friendly remediation guidance.
- Deep working experience securing CI/CD pipelines, both the security of the pipeline infrastructure itself and security within the pipeline.
- Ability to script and automate operational security workflows.
- Solid understanding of IAM design, cloud networking, and secure configuration principles across at major cloud platforms, preferably AWS.