• Designed and built a Knowledge-Driven AI Chatbot using Graph Databases.

• • Leveraged infrastructure data and Snyk 3PP vulnerability data to create an interconnected graph db of Heroku components

• • Integrated the Einstein AI gateway and engineered tailored prompts to interpret and transform a user's plaintext question into db queries and interpreted results

• Performing security assessments of new Heroku & Mulesoft features which consists of:

• • Collaborating with engineers to get a full grasp of the engineering work

• • Analyzing designs from a security mindset and identifying potential vulnerabilities

• • Referencing company security standards and security best practices

• • Proposing effective mitigations for vulnerabilities

• • Performing a code review & security testing once engineering work is completed

• Providing general security guidance to engineers

• Monitoring & responding to incoming questions/requests from engineers in a timely manner

• Collaborating with other security engineers on projects that promote continuous assurance

• Built a security assurance tool to scan a Github Organization consisting of thousands of repositories for potentially insecure Github Actions

• Aggregated data from Github Marketplace and Internally trusted vendors & established trust requirements/levels

• Wrote this tool in python, ran it on Heroku with Postgres addon, incorporated an interactive Slack bot to communicate results and get input from security team