Aaron Son

I’m a Senior Security Software Engineer with 8 years of experience building secure automation, hardening enterprise systems, and improving code review and vulnerability workflows across Linux, cloud, and identity environments. I integrate security checks into CI/CD to reduce risk without slowing delivery. In my recent role at Liberty Mutual Insurance, I built Python and Bash tooling that cut vulnerability triage from days to hours for a security and infrastructure team. I integrated SAST, DAST, and dependency checks into GitHubActions and Jenkins pipelines to block high-risk builds and reduce manual review load across 40+ application releases. I harden Linux and Windows server baselines with Terraform and policy-driven configuration checks, tightening identity and system controls across multi-account AWS. I also review secure design and code changes for internal services, surfacing issues in authentication, secrets handling, and logging before production. I’m especially focused on using AI to speed analysis, while keeping decisions accountable through source checks, test runs, and peer review. I’ve expanded incident triage tooling with SQL and log enrichment in Splunk, documented secure coding patterns for repeatable remediation, and partnered with engineering and IT to coordinate fleet remediation and rollout sequencing.