Software Engineer Prescient Security
Built an end-to-end PCI DSS 4.0.1 audit workspace for a multi-tenant compliance platform, covering client intake, scoping, evidence collection, report authoring, e-signatures, and final report delivery. Implemented questionnaire-driven ROC generation across all 12 PCI DSS requirements with more than 936 structured narrative fields, version history, and automatic finding-status derivation.
Automated large Word report generation for ROC, AOC, and executive-summary documents using python-docx, docxtpl, and custom OOXML merging. Integrated Vanta and Drata for bulk evidence ingestion through Celery workers, added asynchronous AI evidence assessment and webhook flows, and applied security controls across 183 routes including encrypted identifiers, allowlists, XML escaping, and CodeQL remediation.