Abigail Kauf Senior AppSec Engineer | DevSecOps | Security Architect

Security Architect & Senior AppSec Engineer

Paramo Technologies

Nov 2024 - Current (2 years)

• Led HashiCorp Vault deployment from scratch across all business units, eliminating hardcoded
credentials and reducing secret sprawl company-wide.
• Integrated dynamic database credentials via Vault, replacing static secrets across DBA and engineering
teams.
• Built IaC pipelines with Terraform to provision and harden the Vault infrastructure for production-grade
secure operation.
• Defined SSDLC governance framework across multiple BUs, aligning teams to a unified secure
development lifecycle.
• Managed SonarQube scanning coverage across 500+ repositories, driving systematic vulnerability
remediation.
• Designed and implemented the company's DRP Coordination Framework from the ground up.

Cybersecurity Engineer & DevSecOps

Goalsetter

Jun 2022 - Nov 2024 (2 years 6 months)

• Owned end-to-end AWS security infrastructure for a US fintech startup, covering IAM, monitoring,
patching, and incident response.
• Led SOC2 (Type I & II) and SOC1 compliance processes: designed controls, managed evidence
collection, and coordinated with external auditors via Drata.
• Drove PCI DSS remediation program, aligning product and infrastructure to regulatory standards.
• Designed and tested the organization's Disaster Recovery Plan (DRP), ensuring business continuity
readiness.
• Built and documented the company's full security policy suite from scratch.
• Evaluated and onboarded security vendors to improve overall security posture.

Cybersecurity Tech Lead

Rockwell Automation

Mar 2021 - Oct 2021 (8 months)

• Led a 9-person DevSecOps pod under SAFe, integrating SonarQube, BlackDuck, Trivy, and Dotfuscator into
CI/CD pipelines.
• Built a PowerBI dashboard consolidating all BlackDuck findings for leadership tracking.

F

Cybersecurity Analyst

Fiserv (Card Console)

May 2020 - Mar 2021 (11 months)

• Security champion for a global team (US, India, Peru, Mexico); executed SAST/DAST end-to-end and drove
developer remediation.
• Reviewed card console architecture for compliance; presented biweekly security metrics at sprint closures.

C

DevSecOps

CuidAR Mobile App (Government)

Apr 2020 - Jun 2020 (3 months)

• Secured SDLC of Argentina's COVID-19 mobile app from design phase; configured WAF, GuardDuty, IAM, and
S3 security controls.

Cybersecurity Engineer

Globant

Jan 2020 - Jul 2022 (2 years 7 months)

• Managed Qualys vulnerability program over AWS EC2 infrastructure, using ScoutSuite for continuous posture
assessment.
• Coordinated remediation with the SRE team, automating vulnerability resolution in cloud infrastructure.
• Executed static code analysis with Fortify.

Cloud Engineer

Philip Morris International

May 2019 - Jan 2020 (9 months)

• Managed AWS cloud operations across 150+ accounts spanning multiple service models (IaaS, PaaS,
SaaS), supporting projects with different infrastructure requirements across business units.
• Acted as the primary point of contact for infrastructure support tickets, triaging and resolving issues
according to project needs and SLA commitments.
• Provisioned, configured, and maintained cloud environments; ensured compliance with configuration
management standards across the multi-account landscape.

Cloud Security Consultant

Banco Comafi

Dec 2018 - May 2019 (6 months)

• Advised the bank on cloud migration strategy and implementation for technology innovation projects,
covering IaaS, PaaS, and SaaS adoption.
• Defined security requirements and architecture guidelines to ensure new cloud environments met
banking compliance and risk standards.
• Guided project teams through secure cloud onboarding, bridging the gap between business innovation
goals and IT security policies.

IT Security Operations Analyst – Monitoring & Controls

Tenaris

Aug 2017 - Dec 2018 (1 year 5 months)

• Managed IAM operations and DLP controls across a global organization; delivered security metrics and
advisory reports to regional leadership.
• Took a key role in global IT Security projects, collaborating across geographies and business units.

Abigail Kauf

About

Detail

Timeline

Résumé

Abigail Kauf

About

Detail

Behavioral traits