Derrick Song
Director, Security Engineering at Sony
Los Angeles, California, United States
Summary
👤
Senior🎓
Top SchoolDerrick Song is a Director of Security Engineering with over a decade of hands-on experience building and leading cloud-native security programs across startups and global enterprises. He blends incident response, threat hunting, and vulnerability management with security architecture and automation to design scalable defenses for AWS and modern CI/CD pipelines. Derrick has led selection and deployment of platform controls, built internal red team capabilities, and advised CISOs on security strategy and customer assurance. He runs a consulting practice while leading security teams at Sony, demonstrating an ability to move between strategic leadership and blue-team engineering work. A frequent speaker and practitioner, he favors automation, pragmatic documentation, and teaching teams to operate security tools effectively. Less obvious: he combines enterprise compliance experience (ISO/PCI/CIS) with deep operational practice in serverless and logging/SIEM architectures, enabling both governance and rapid incident response.
10 years of coding experience
7 years of employment as a software developer
University of California, San Diego
Github Skills (45)
aws-lambda9
protect9
serverless8
cli8
serverless-framework8
aws8
azure-functions8
security8
nodejs7
lambda7
devsecops7
golang7
cicd7
data-loss-prevention7
aws-dynamodb7
Programming languages (4)
Github contributions (5)
derricksong/weighted_rps
Feb 2020 - Jul 2020
An attempt at adding meaningful strategy to a classic game
Contributions:9 pushes, 1 branch in 5 months
gamemeaningfulclassic-gamestrategy
derricksong/vulnerability-visualization
May 2017 - May 2017
Contributions:21 pushes, 1 branch in 1 day
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.