Security

Security leadership for growth-stage companies.

Cloud posture security across AWS, Azure, and GCP — IAM least privilege, public exposure, encryption, logging coverage, landing-zone guardrails.

Audit data quality across pipelines, warehouses, and stores.

Deal desk: reviews, approves, and structures non-standard sales deals.

Scan project dependencies for vulnerabilities, license issues, and upgrade opportunities across Python, Node.js, Go, and Rust.

Audit UI/UX designs for quality, AI-generated slop, and accessibility.

Detect documentation drift against code changes, score staleness, validate API docs via AST parsing, and audit link integrity.

Audit Microsoft Word (.docx) documents for heading hierarchy, comments, tracked changes, and style consistency.

Environment and secrets management lifecycle: .env scaffolding, validation, leak detection, and rotation across Vault, AWS SSM, 1Password, and Doppler.

Design, review, and validate Google Cloud (GCP) architectures.

Audit and repair an internal knowledge base — staleness, ownership gaps, orphans, duplication, and findability.

Audit PowerPoint (.pptx) decks for slide count, text density, embedded images and fonts, hidden slides, speaker notes, and animation density.

Systematic PR review with blast-radius analysis, security scanning, and breaking-change and test-coverage deltas.

Orchestrate end-to-end release pipelines.

Multi-agent source security audit with a coverage ledger, independently verified findings, and machine-checked records.

SecOps for application security, vulnerability management, compliance, and secure development.

STRIDE threat modeling, DREAD risk scoring, secret detection, and secure architecture design.

Technical SEO auditing covering crawlability, indexation, Core Web Vitals, on-page optimization, and competitive gaps, with an 85-point checklist and…

Security audit and vulnerability scanning for AI agent skills before install.

Validate and score Claude Code skill packages for quality, completeness, and best-practice compliance.

Evaluate and compare technology stacks with TCO analysis, security assessment, and ecosystem health scoring.

Perform a comprehensive DRY (Don't Repeat Yourself) code review on a codebase.

Builds sign-in - tokens in expo-secure-store, shared refresh, protected routes, OAuth PKCE, Apple sign-in.

Builds react-hook-form + valibot forms: one schema, catalog-key errors, TextField kinds (keyboard, autofill), focus chain.