Mar 2022 – Nov 2023 · 1 yr 8 mos · Belgium

• 1. Led the design and implemention of robust security controls for cloud applications, enhancing organization's cloud-based systems and data security.
• 2. Collaborated seamlessly with engineering, infrastructure and development teams to develop cloud security capabilities and ensure the resilience and high availability of cloud applications.
• 3. Conducted review of cloud solutions (AWS, Azure) based on industry best practices (NIST, CIS), resulting in strengthened security measures and compliance.
• 4. Assisted in the development, configuration, implementation, and maintenance of information security processes, policies, standards, procedures, and controls, contributing to an improved overall security posture.
• 5. Proactively enhanced security frameworks, documentation, tools, processes, and methodologies, leading to a remarkable 30% increase in security maturity.

Jul 2019 – Jan 2022 · 2 yrs 6 mos

• Reviewed 50+ cloud solution architecture (AWS, Azure) using industry best practices (NIST, ISO, CIS, etc.) resulting in enhanced security measures and compliance.
• Ensured security by design principles were integrated into architectural design patterns for multiple projects, reducing potential security vulnerabilities.
• Conducted threat modelling for identifying and mitigating security risks , ensuring a robust and secure cloud infrastructure.
• Contributed to enhancing SSDLC processes, integrating security throughout the software development lifecycle, leading to improved application security.
• Performed 100+ comprehensive Vulnerability Assessments and Penetration Testing for networks and applications, , identifying and remediating vulnerabilities to bolster overall security.
• Aligned Vulnerability and Patch Management process with industry standards, ensuring timely patching and providing improvement recommendations for vulnerability remediation.
• Demonstrated expertise in SAST, DAST, and API security, resulting in ~50% reduction of security gaps and enhancing the security architecture.

Jul 2018 – Jun 2019 · 11 mos

Jul 2017 – Jun 2018 · 11 mos

Jul 2016 – Jun 2017 · 11 mos

Mar 2016 – Jun 2016 · 3 mos · Bangalore, India

• 1. Conducted comprehensive manual security assessments and validations of client systems, websites, and networks, successfully discovering and identifying critical vulnerabilities.
• 2. Thoroughly documented exploit chain and proof of concept scenarios, providing valuable insights and actionable recommendations to clients for vulnerability remediationParticipate in Security Assessments of networks, systems and applications .
• 3. Configure, run and monitor automated security testing tools
• Perform manual security assessment and validation of vulnerabilities of client systems, web sites and networks to discover 
vulnerabilities.
• 4. Thoroughly document exploit chain/proof of concept scenarios for client consumption

Aug 2013 – Feb 2016 · 2 yrs 6 mos · Pune, India

• 1. Performed as a Security Log Analyst in Security Information and Event Management (SIEM)/Managed Security Services, analyzing logs from 10+ security technologies, including IDS/IPS, HIDS, Application Firewalls, and Vulnerability Scanners.
• 2. Conducted in-depth research and analysis of logs, identifying potential security threats and incidents, contributing to proactive threat detection and response.
• 3. Played an active role in sprint planning meetings and decision making sessions, collaborating effectively with the team to ensure efficient and timely resolution of security issues.
• 4. Research & log analysis from wide range of security technologies including, but not limited to: SEIM, IDS/IPS, HIDS, Application Firewalls and Vulnerability Scanners.
• 5. Simulating attacks on different security products for analysing logs and simulating real world scenario.
• Creating Symantec engineering specifications for individual security products to correctly interpret security log entries.
• 6. Deploying Symantec Log Collectors to Security Operation Center (SOC) in Cloud to monitor real time customer logs and generate correlated alerts.