Product Security Engineer · DevSecOps & Detection Engineering
Software and integration engineer transitioning into cybersecurity, with a current focus on Product and Application Security. Professional experience is strongest in APIs, backend and integration workflows, production troubleshooting, data transformation and validation, technical documentation, and cross-team delivery.
Experience spans integration requirements, development, testing, deployment, monitoring, and troubleshooting; event-driven MuleSoft workflows; production issue diagnosis using logs, Postman, HTTP responses, and data analysis; and portfolio work involving API authentication and backend development.
CompTIA Security+ and AWS Certified Cloud Practitioner support a growing security foundation, with continued hands-on development through labs and projects. Target direction centers on early-career security roles where a software-engineering foundation can translate into secure applications, technical analysis, and security-focused engineering.
Engineering
REST APIs · Systems Integration
Security & Platform Foundations
Operational Strengths
A three-VM blue-team lab built on Wazuh, with 5 custom Sigma detection rules mapped to MITRE ATT&CK techniques and validated against Atomic Red Team simulations. Detection coverage spans credential dumping, PowerShell abuse, and scheduled task persistence — each rule shipped with adversary context and hardening guidance.
Stack: Wazuh · Sigma · Atomic Red Team · MITRE ATT&CK / D3FEND · Ubuntu · Bash
API-based integration workflows between simulated enterprise systems, demonstrating secure API design at scale. JSON/XML transformation pipelines with input validation, error handling, and reusable transformation logic — patterns drawn from 13+ production integrations shipped at Aries Worldwide Logistics.
Stack: Mulesoft · REST APIs · JSON/XML · Secure-by-default API patterns
Backend services for inventory and supplier workflows built with a Dallas Software Developers cohort—RESTful APIs and real-time operational data processing, deployed in an Agile team environment.
Stack: Node.js · TypeScript · REST APIs · Cloud deployment
Always open to conversations about detection engineering, DevSecOps practices, AWS security, or breaking into security from a software background. If you're hiring, building, or just want to compare notes: