Security Engineer
About You Holding X Zalando
04.2024 - Current
- Improve monitoring and scanning tools to detect security threats and automate routine tasks using Python.
- Design and implement Terraform/Terragrunt configurations for infrastructure deployments.
- Develop and integrate custom security tools for AWS infrastructure to enhance threat detection and response.
- Conduct internal security audits to assess vulnerabilities and ensure compliance with security best practices.
- Administer Google Admin security policies, enforcing IAM best practices and strengthening access controls.
- Strengthen web security by implementing Cloudflare WAF, DDoS protection.
- Perform incident response investigations, forensic analysis, and implement remediation strategies.
- Investigate phishing emails, analyzing email headers and payloads for malicious content.
- Participate in employee security awareness training as a trainer for new employees.
