Available for security & engineering collaborations
I build software and secure the applications, cloud infrastructure, and CI/CD pipelines that ship it—through product engineering, security reviews, testing, hardening, and remediation.
Focused on
New York City metropolitan area
Working remotely
Security engineering · cloud infrastructure · full-stack development · practical problem solving
01 / Experience
2025 — Present
Security Engineer
Building security features for customer-facing applications and internal platforms while securing engineering workflows through threat modeling, CI/CD guardrails, security tooling, and hands-on vulnerability remediation.
2025 — Present
Freelance Software Engineer
Building clinician-facing workflows for a surgical case-logging and technique-tracking platform used for collaboration, search, scheduling, and export.
2026 — Present
Cloud Infrastructure Engineer
Migrating a production application to AWS with secure VPC networking, private compute, CI/CD, monitoring, and defense-in-depth controls.
2022 — 2025
Senior Application Security Engineer
Led security assessments across enterprise applications, using penetration testing, SAST, DAST, and practical remediation guidance to improve the secure SDLC.
How I work
Build product features and secure the source, CI/CD workflows, and release processes that get them to production.
Turn audits, threat models, penetration tests, and bug bounty findings into clear priorities for engineering teams.
Close vulnerabilities with practical fixes across applications, identity, cloud infrastructure, and third-party tooling.
Cloud infrastructure
Production AWS foundation for a healthcare platform: private EC2 compute, S3, encrypted RDS, CloudTrail, GuardDuty, Cloudflare WAF, and rollback-capable deployments.
Product engineering
A modern surgical case-logging platform designed around clinician workflows, collaboration, search, notifications, calendar scheduling, and export.
In development
A cross-platform workout tracker focused on personalized progression, clean navigation, and privacy-conscious data handling.
Full-stack application
A role-based medical-office portal built with Laravel, React, and MySQL for managing patients, doctors, and administrators through secure data workflows.
Automation
A Python and SQL bot that creates balanced five-person teams, sends automated notifications, and supports custom Discord servers.
03 / Contact
Whether you need a security review, a cloud foundation, or a thoughtful engineering partner, I'd love to hear what you're building.
wang.kj00@gmail.com ↗