Builder profile
@sheenatolentino
I write backend services and I spend most of my time on the identity and access end of them, which is how I ended up with a security title without ever having been on a security team. My route in was support, then backend, then the person who kept being asked to review the login code, and eventually the person who was supposed to. What I like about the work is that it is one of the few areas where being pedantic is the job. I am not a researcher and I do not find vulnerabilities in other people's software; I make ordinary business systems less easy to get into, mostly by removing things. Currently at a company in the payments space and doing more design review than code, which I have mixed feelings about.
Joined July 2026
A generator that turns the accounts I administer for family into a folded paper sheet they can keep, because I am the recovery method and I am not always reachable.
Sheena Marie Tolentino
@sheenatolentino
I photograph every grocery receipt and this turns them into a per-item price history, which has changed what I buy and where.
Sheena Marie Tolentino
@sheenatolentino
Fixed what a penetration test found in the sign-in path of a set of internal admin tools, and then fixed the reasons it had gone unnoticed.
Sheena Marie Tolentino
@sheenatolentino
Removed long-lived database and API credentials from about thirty services, one service at a time, over most of a year.
Sheena Marie Tolentino
@sheenatolentino
Built a single tamper-evident audit trail for a payments product that previously logged important events in six different places, none of them completely.
Sheena Marie Tolentino
@sheenatolentino
Rebuilt how sessions, tokens and sign-out worked on a portal where signing out did not reliably sign you out.
Sheena Marie Tolentino
@sheenatolentino
Built the system that makes managers actually review who has access to what, at a lender where the previous answer was a quarterly spreadsheet nobody read.
Sheena Marie Tolentino
@sheenatolentino