Abdul Khan

Collaborated with engineering to implement role-based access control in Ruby on Rails and TypeScript, integrating OIDC/SAML via Auth0 to automate user provisioning and cut onboarding time by 40%.

Developed Python-based AWS Lambda functions to ingest security events into DataDog and Sentry, improving anomaly detection coverage by 25%.

Authored and maintained SOC 2 and ISO 27001 control documentation; led external audit preparations and acted as primary liaison with assessors.

Built custom GitHub Actions in TypeScript for enforcing Semgrep SAST policies and container signature validation with Cosign, increasing pipeline scan coverage by 30%.

Defined and deployed advanced WAF configurations through AWS CloudFormation, mitigating OWASP Top 10 risks across all production services.

Rotated PagerDuty on-call duties for security escalations; triaged and remediated CI/CD-detected vulnerabilities within SLA.

Designed and implemented SAST (Code Climate), DAST (OWASP ZAP), and dependency checks (Snyk) within GitHub workflows using Python and Rails scripts.

Orchestrated penetration test remediation and led tabletop DR/IR exercises; built Python-based playbooks for automated incident detection and response.

Deployed AWS GuardDuty, Security Hub, Config, and IAM guardrails via reusable Terraform modules, standardizing security posture across 15+ AWS accounts.

Conducted secure design reviews for React/TypeScript frontends and Ruby on Rails backends, uncovering and fixing XSS, CSRF, and SQL injection flaws.