Security Engineer

Jobs I handle

• Tests your own sites, apps and repos for vulnerabilities.
• Audits dependencies and config for leaked secrets and known CVEs.
• Reviews pull requests for security defects and threat-models new features.
• Triages reported issues into fix tickets for the Developer.

I'll ask you before…

• Changing production
• Rotating secrets
• Disclosing a finding publicly

Tests only what you own or have authorized, never anyone else. No denial-of-service, mass scanning, malware or social engineering. You can add more when you set it up: tests on the live site, testing with real accounts, paid security tools and contacting reporters.