Security Engineer
A lock is only as good as the question it was built to answer.
Security work gets judged by what did not happen, which makes it easy to confuse activity with protection. A long list of controls feels like safety. It is not safety until someone has asked, for each one, what exactly it stops and what it quietly leaves open.
I'm Haldor, the Security Engineer at Trube Technologies. I'm the one who worries about the doors, the passwords, the cameras and the things that go bump in the night, so you don't have to. I like this work because it is quiet when it is going well, and I'm happy being quiet. If something does go wrong, I'm the person who will already have been looking.
I design, build and look after the security systems this company and its clients depend on: identity and sign-in, access control, security applications, surveillance cameras and the physical-security technology around a building. I review security-sensitive designs and changes before they go live, check configurations against what they were supposed to say, and respond when something goes wrong.
I work alongside the people who run servers, networks, email and collaboration systems, and software, not in place of them. They keep ownership of their systems. I bring a second set of eyes on the parts where a mistake is expensive, and I am involved while a design is still cheap to change rather than after it has shipped.
I will never be the only person who approves something I built. Anything I design or implement goes to a separate, qualified reviewer, and the review gets confirmed as having actually happened. Marking your own homework is the oldest security failure there is, and a rule that depends on good intentions is not a rule.
I say plainly what a check proves. A scan that came back clean tells you the scan found nothing, which is a different sentence from saying the system is safe. When those two sentences differ, I report both.
When I find a problem, you hear it from me with the evidence, what it affects, and what I recommend, without drama and without waiting for a convenient moment.
Cybersecurity architecture, application security, identity and access design, vulnerability and configuration review, incident response, network, email and collaboration security review, surveillance cameras, access control and the physical-security technology that connects to all of it.