Open to opportunities

Anton User

@antonuser10

Head of Information Security helping remote-first SaaS teams ship fast and safely through modern identity and DevSecOps.

Spain

Message

What I'm looking for

I’m looking to lead information security end-to-end in a remote-first product company—owning identity, secure SDLC, cloud posture, and compliance—so teams ship fast and safely with measurable outcomes like fewer incidents and faster audit prep.

I’m a Head of Information Security with over 15 years in IT (9 in security), focused on helping remote-first SaaS teams protect highly sensitive data while moving fast. This year, we hit 100% SSO+MFA, started shifting to passwordless, cut cloud misconfiguration fixes from two weeks to two days, and halved audit prep time (80 to 40 hrs).

I direct a cross-domain security team and own a ~$1M departmental budget (headcount, SaaS vendor spend, and advisory), while orchestrating talent acquisition for senior roles. I embedded security work into delivery—raising on-time security commitments from ~60% to ~85% with a JSM/Slack-integrated helpdesk—and I lead product security and observability initiatives, including a UEBA anomaly analysis feature and a unified log pipeline.

My approach is practical and measurable: I embedded SAST/SCA/DAST and defect triage into CI/CD to improve high-risk closure within SLA from 57% to 93%, reducing cloud misconfiguration MTTR from 14 to 2 days and sustaining zero critical cloud incidents for four consecutive quarters. I also implement policy-as-code with automated evidence capture, maintaining SOC 2, ISO 27001, and GDPR posture alongside comprehensive IR runbooks and continuous monitoring.

Experience

Work history, roles, and key accomplishments

Current

Head of Information Security

Current

TaxDome

Dec 2024 - Present (1 year 7 months)

Led enterprise information security for a remote-first SaaS handling highly sensitive data, driving identity security (100% SSO+MFA and passwordless transition), improved cloud security MTTR, and reduced audit prep time. Oversaw security architecture, product security/observability, secure SDLC, and compliance programs while sustaining zero critical/high incidents over multiple consecutive quarter

Cloud Security Engineer

Jabil Inc.

Mar 2022 - Dec 2024 (2 years 9 months)

Built and operated cloud security capabilities including CSPM aggregation across AWS and Azure subscriptions, and implemented reporting and policy guardrails to reduce compliance gaps. Integrated web application vulnerability discovery and reporting to improve remediation speed.

Cloud Security CSPM AWS Azure Cloud Security Compliance Python Compliance Reporting Azure Policy GuardRails

Cloud Security Engineer

iTechArt Group, LLC

Jun 2021 - Feb 2022 (8 months)

Integrated security tooling into cloud provisioning pipelines and advised DevOps teams on secure cloud architecture practices. Assessed cloud architectures, recommended security improvements to reduce risk exposure, and developed policies mandating security controls during infrastructure development.

Cloud Security TFSEC Jenkins Terraform Security Architecture Security Best Practices Security Policies

Application Security Engineer

BelarusAras Corp Development Center

Nov 2017 - May 2021 (3 years 6 months)

Developed and integrated secure SDLC (S-SDLC) into CI/CD by embedding static code analysis into pipelines, and performed vulnerability assessments and security consultations. Built security tooling (Roslyn analyzers) for SQL injection and path traversal detection and integrated SCA for third-party dependency vulnerability and licensing issues.