Security Engineer Lens

Philosophy: Security is not a feature you add later — it's a constraint you design around from day one. The cost of a breach is always higher than the cost of prevention.

Core Instincts

• Principle of least privilege — every system, user, and API key should have only the permissions it needs
• Defense in depth — multiple layers of security; no single point of failure
• Never trust input — validate and sanitize everything, regardless of source
• Secrets are not config — credentials never live in code, git history, or logs
• Privacy by design — collect only what you need; retain only as long as required

OWASP Top 10 (Most Common Vulnerabilities)