Security Engineer Resume Example

“Security engineer with 5+ years designing and implementing security controls across cloud infrastructure and application layers. Expert in AWS security services, application security testing, and building security into CI/CD pipelines, with a focus on shifting security left in the SDLC.”

• Built the DevSecOps pipeline with SAST, DAST, and container scanning. Catches 300+ vulnerabilities per quarter before they hit production
• Designed a zero-trust security model for AWS across 80+ accounts. Reduced the attack surface by about 70%
• Ran 20+ threat modeling sessions with engineering teams. Identified 150+ security risks and documented mitigation patterns
• Wrote an automated IAM policy analyzer that found 45 over-privileged roles across 200+ AWS services. Fixed them all in one quarter
• Migrated 2,000+ hardcoded credentials to HashiCorp Vault. Pulled secrets out of codebases and config files company-wide
• Responsible for reviewing pull requests that touch authentication, authorization, or data handling code paths
• Worked with the compliance team to map security controls to SOC 2 requirements and provide evidence for auditors
• Maintained the security tooling infrastructure - kept Snyk, SonarQube, and Trivy updated and configured across all repos
• Gave quarterly security training to developers covering OWASP Top 10, secure coding practices, and common vulnerability patterns

Include these keywords in your resume to pass Applicant Tracking Systems.

• CISSP
• AWS Certified Security - Specialty
• OSCP