Yehualashet.

PROBLEM

Security teams faced slow, manual incident triage across disparate tools, leading to delayed threat containment and inconsistent response procedures.

ARCHITECTURE

Event-driven microservice architecture with a Django orchestration layer consuming webhook events from SIEM/EDR sources, dispatching playbook actions through a task queue, and persisting audit trails to PostgreSQL.

SECURITY & TESTING

Role-based access control on all endpoints. Full integration test suite covering playbook execution paths. Secrets managed via environment injection — zero hardcoded credentials.

PROBLEM

Engineering leadership lacked a unified view of pipeline health, vulnerability scan results, and deployment status across multiple repositories and environments.

ARCHITECTURE

React SPA backed by a Django REST API. GitHub Actions and GitLab CI/CD webhooks feed pipeline metrics into the backend. Real-time updates delivered via WebSocket channels.

SECURITY & TESTING

OWASP dependency scanning integrated into CI. CSRF and XSS protections enforced server-side. End-to-end tests validate dashboard rendering under various permission levels.

PROBLEM

Security engineers manually executed and correlated output from multiple scanning tools (Nmap, Nikto, OWASP ZAP), wasting hours per assessment cycle.

ARCHITECTURE

CLI-driven Python framework that orchestrates scanning tools in parallel, normalizes output into a unified JSON schema, and generates consolidated PDF reports. Packaged as a Docker image for reproducible execution.

SECURITY & TESTING

Input sanitization on all user-supplied targets. Sandboxed execution within Docker containers. Unit tests cover parser logic for each supported tool's output format.

PROBLEM

QA cycles were bottlenecked by flaky, poorly structured test suites that provided low confidence in release readiness and slowed deployment cadence.

ARCHITECTURE

Layered test framework following the Page Object Model pattern. Shared fixtures and factories ensure reproducible state. Integrated with CI pipelines for automated regression on every pull request.

SECURITY & TESTING

Test data generated via factories — no production data in test environments. CI secrets rotated on schedule. Coverage reports enforced as merge-gate thresholds.