Conducted full-scale vulnerability assessment and implemented multi-layer security including MFA, WAF, and data encryption, achieving HIPAA compliance.