S Nchifong
Devsecops Application Security Engineer Gcp Aws @Kunai, part of the PwC Network
Signup · Get unlimited contacts
WORK HISTORY
Devsecops Application Security Engineer Gcp Aws @Kunai, part of the PwC Network
CA, US
Led incident response activities and root cause analyses, recommending security measures to prevent recurrence.• Implemented security and compliance frameworks such as PCI-DSS, ISO 27001, HIPAA, SOX, and GDPR to meet organizational and regulatory requirements.• Designed, implemented, and maintained AWS WAF rules to protect web applications against common threats, including SQL injection and cross-site scripting (XSS).• Integrated AWS WAF with CloudFront and API Gateway to enhance security for web applications and APIs, reducing exposure to attacks.• Automated vulnerability scanning in CI/CD pipelines using tools like WhiteSource, Snyk, and Checkmarx.• Configured and maintained dynamic application security testing (DAST) tools, including OWASP ZAP and Burp Suite, for enhanced application security.• Integrated static application security testing (SAST) tools, such as SonarQube and Fortify, to identify vulnerabilities in code before deployment.• Implemented and maintained SOC 2 compliance frameworks, ensuring adherence to Trust Services Criteria (security, availability, processing integrity, confidentiality, and privacy).• Automated security checks and compliance validation for SOC 2 and other regulatory frameworks (PCI-DSS, ISO 27001, HIPAA, SOX, GDPR) using tools like AWS Config, Azure Policy, and GCP Security Command Center.• Conducted software composition analysis (SCA) with tools like Nexus IQ and 42Crunch to ensure compliance with open-source licensing and address vulnerabilities.• Partnered with development teams to remediate vulnerabilities, leveraging tools such as Qualys, Aqua Security, and Twistlock.• Developed and enforced security policies-as-code using tools like Styra, Terraform, and Open Policy Agent (OPA).• Conducted regular risk assessments to identify potential threats and implemented mitigation strategies leveraging AWS Config, GCP Security Command Center, and Azure Security Center.
EDUCATION
University of Buea
Bachelor of Science - BS, Computer Science
ABOUT S NCHIFONG
Versatile IT professional with over 9 years of experience in DevSecOps, DevOps, and Cloud Security, with a focus on AWS and GCP. Adept at seamlessly integrating security into development and operational processes to enhance cloud infrastructure efficiency, resilience, and scalability. Proven expertise in driving automation, fostering a security-aware culture, and implementing robust security practices. Skilled in vulnerability assessments, compliance management, and threat detection across diverse cloud environments, with a strong track record of securing CI/CD pipelines and ensuring regulatory compliance.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.