Verita AI Software Engineer, San Francisco, CA
- Designed and shipped a production vision-LLM audit pipeline that analyzes contractor screen recordings against per-project task policies, classifies work hours (AI use, off-task, guideline violations), and produces sealed, priced, recomputable audit ledgers; benchmarked read models across providers via OpenRouter and achieved 80% precision and recall on a golden evaluation set, with 264 sessions sealed in production. Case study
- Architected the core of an LLM data-annotation platform (Django REST Framework, React): five-role access control with a capability matrix, an audited workflow state machine with calibration routing, screening and qualification gates, an append-only audit log covering all 54 endpoints, and 10+ annotation widget types; expanded the test suite from 210 to 1,239 tests.
- Hardened the platform's image-ingestion pipeline with SSRF-safe fetching, presigned re-hosting to S3, and asynchronous batched SQS enqueueing that eliminated timeouts on 1,000-image imports; delivered 6,756 processed images to a client with geo-derived metadata backfill.
- Delivered the second-generation finance-interview rubric verifier for an AI interviewing product in six days, implementing LLM-judge claim validation, shadow-verifier gating, and hard execution time limits; instituted a mutation-testing standard requiring each test to demonstrably fail against a deliberate source defect.
- Led SOC 2 Type II readiness from 154 to 165 of 173 controls (95%) during an active audit window: executed a pgAudit and storage-encryption migration across 11 production PostgreSQL databases, deployed GuardDuty/CloudTrail/file-integrity monitoring, produced 40+ evidence artifacts, and remediated authenticated penetration-test findings.
- Developed a multi-scanner application-security pipeline (gitleaks, OpenGrep, Bandit, Trivy, CodeQL) with LLM-assisted triage, reducing 345 raw findings to 33 verified vulnerabilities including nine critical issues (remote code execution, SSRF, IDOR, exposed credentials). Open-source version