Hiring team
Security Engineer
Target organization
Location withheld
Dear hiring team,
I understand that the central requirement for this Security Engineer role is reducing security risk through threat-aware design, proportionate controls, incident evidence, and verifiable remediation. I want to make secure behavior easier to operate and verify, rather than relying on policy language alone.
As Senior Security Engineer, I held both execution and review responsibility. As workstream lead, I performed threat modeling for account recovery and session renewal, tracing trust boundaries and abuse paths. I turned the findings into application security controls and negative authorization tests before release.
Within that same senior scope, I also owned the following work. With responsibility for the review standard, I used Python to reproduce authorization vulnerabilities during scoped penetration testing in an approved test environment. I paired each finding with a failing request, a code fix, and a regression test that confirmed the bypass was closed.
I would welcome the opportunity to discuss the decisions and delivery I owned, and how I could apply that experience in this role.
Sincerely,
J. Lee