A ground-level look at the daily dev workflow of a security engineer — tools, code review process, security automation, Git workflow, and incident response tooling.
Dev Workflow as a Security Engineer: What My Day Actually Looks Like There's a version of "security engineer workflow" content out there that's all threat models and compliance frameworks. That's real...
My practical, reproducible workflow for finding exposed secrets in GitHub repos using trufflehog, gitleaks, and Neovim — with CSV output for reporting.
Hunting Exposed Secrets in GitHub: My Neovim-Powered Workflow Finding secrets in source code is one of those tasks that sounds simple but has enough edge cases and tooling decisions to consume an enti...
A hands-on walkthrough of building security into CI/CD pipelines with real YAML examples across GitHub Actions, Azure DevOps, and GitLab CI.
Building a Secure DevOps Pipeline I want to start with something that took me too long to internalize early in my career: the pipeline is the best security control you have. Not the firewall. Not the...