Analytical professional with substantial experience designing and implementing end-to-end DevSecOps strategies, integrating security controls into CI/CD pipelines across hybrid and multi-cloud architectures (AWS, Azure, GCP).
Adept at leading cross-functional teams to embed security into every phase of the software development lifecycle, ensuring compliance with industry standards like NIST, ISO 27001, and SOC 2. Expertise in containerization, orchestration, and image security using tools like Docker, Kubernetes, Anchore, and Aqua Security. Proficient in infrastructure as code (IaC) with Terraform, Azure Bicep, and AWS CloudFormation, incorporating static and dynamic security scanning into deployment pipelines. Knowledgeable in DevSecOps tooling and automation, including GitHub Actions, Jenkins, SonarQube, Snyk, Checkmarx, and OWASP ZAP, with a focus on vulnerability assessment and code quality assurance. Strong communicator, stakeholder engagement, and problem-solving skills, with the ability to align security initiatives with business objectives.