Sarthak Kapoor

DevOps Engineer

Bengaluru, Karnataka, India7 yrs 6 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Led security architecture for high-value digital assets.
Drove successful ISO certifications year after year.
Standardized threat modeling for critical security assessments.

Stackforce AI infers this person is a Cybersecurity expert with a strong focus on Fintech and enterprise security solutions.

Contact

Skills

Core Skills

Information Security ManagementSecurity Architecture DesignCybersecurity

Other Skills

Amazon Web Services (AWS)CCentOSCloud SecurityCorporate SecurityCryptographyData SecurityDebianDevSecOpsEmail SecurityEndpoint SecurityFirewallsIT Security AssessmentsIdentity & Access Management (IAM)Leadership

About

A Information Security Engineer with 7 years of experience leading initiatives across infrastructure, enterprise and cloud security. Adept at building defense-in-depth architectures, integrating security in M&As,and driving compliance readiness. Recognized for bridging business and security goals while elevating organizational resilience. Always a firm believer of the 'Security First' ideal, I'm all game for a challenging, out of a comfort-zone role that comes my way.

Experience

Coindcx

Lead Infosec Engineer

May 2022 – Present · 3 yrs 10 mos · Bengaluru, Karnataka, India · On-site

1. Led the end-to-end security architecture design for custody platforms and the exchange, building layered defenses that safeguarded digital assets worth millions.
2. Conducted security architecture reviews and gap assessments for both existing systems and new product initiatives, ensuring risks were identified and addressed early.
3. Designed and implemented defense-in-depth controls across infrastructure, data, email, applications, endpoints, and identity layers, strengthening overall resilience against evolving threats.
4. Orchestrated the security integration of a newly acquired company, driving initiatives from custody hardening to enterprise security modernization, and aligning them with organizational standards.
5. Drove, single-handedly, all security engineering audit requirements for ISO 27001 and ISO 27701, ensuring successful certifications year after year.

Security Architecture DesignVulnerability AssessmentCybersecurityCloud SecurityIdentity & Access Management (IAM)Information Security Management

Flipkart

Security Engineer

May 2021 – Apr 2022 · 11 mos · Bangalore Urban, Karnataka, India

1. Conducted and assessed several security solutions for their architecture and configurations to determine their efficacy and effectiveness in the ever-evolving threat landscape.
2. Recommended and advised on the remediations and workarounds to bridge the gaps identified during assessment keeping business unhampered.
3. Performed architectural reviews for various critical projects focussing on several aspects of security.
4. Curated security standards and guidelines for several tools and technologies in accordance with the CIS and NIST framework.
5. Standardized a threat modelling approach for infrastructure security assessment across Flipkart.
6. Headed and executed security assessments for critical mergers and acquisitions, deep-diving into all aspects.

Security Architecture DesignCybersecurityThreat ModelingVulnerability ManagementInformation Security Management

Infosys ltd

2 roles

Senior cyber security analyst

Promoted

Aug 2020 – May 2021 · 9 mos

1. Secured an environment of more than 20k endpoints from being exploited by malicious actors and campaigns through the use of TrendMicro, Microsoft Defender and Nessus.
2. Configured and managed email security and defended against email threats such as spam, phishing, malware and ransomware, and targeted email attacks.
3. Managed and configured Public key infrastructure for the client.
4. Configured and managed protection of sensitive information using IRM and DLP.
5. Investigated events/incidents related to the cyber-world and managed security of Azure cloud infrastructure.

CybersecurityEmail SecurityPublic Key Infrastructure (PKI)Information Security Management

Cyber Security Analyst

Jul 2018 – Jul 2020 · 2 yrs

Uvisoft technologies

Embedded systems intern

May 2016 – Aug 2016 · 3 mos · Gurugram, Haryana, India

Analyzed, designed and, implemented engineering designs for producing electronic devices and systems and microprocessor-based control applications by applying principles of mathematics, digital signal processing, and computer engineering.