Oct 2022 – Feb 2024 · 1 yr 4 mos · India · Remote

• As part of the Security Architecture team:
• Coding up services (using Go) and Deploying them using Kubernetes
• Acted as on-call for own services
• Managing infrastructure using Terraform (AWS, Signal Sciences, GitHub...)
• Helped create and deploy custom technical architecture.
• Maintained the SOAR platform (playbooks, integrations, custom Python actions, IAM, POC)
• Metrics collection and monitoring
• Achievements:
• Found 100+ hard-coded secrets in git repositories
• Saved hours of manual work during tool migration
• Automated security alert validation and alerting
• Helped save $$$ by developing custom in-house solutions

May 2022 – Sep 2022 · 4 mos

• Working on a project under the OWASP
• Foundation, Core rule set team.
• An open source project to automate the
• process of testing exploit PoCs against mod-
• security web application firewall running
• rules from Core rule set.
• (Also, It's CI/CD friendly!)

Dec 2021 – Jul 2022 · 7 mos · Noida, Uttar Pradesh, India

• Worked on customer facing cloud security SaaS product
• Analysed, Audited and Remediated cloud compliance rules for AWS
• manually as well as automatically using Python
• Created an automation for testing Terraform scripts and AWS Lambda
• functions.
• Automated Infrastructure deployment using Terraform.
• Automated the entire process of Client onboarding in GCP using
• deployment manager.
• Worked on services such as ECS, ECR, EC2, S3, IAM etc.
• Utilized Python and Bash to automate tedious tasks

Jun 2021 – Sep 2021 · 3 mos

• Performed Monitoring of large client infrastructures
• Handling Detection alerts and helping the clients remediate security
• issues.
• Worked with ELK Stack (as a SIEM), Arcsight and OSquery.
• created dashboards in Kibana for infrastructure monitoring
• Performed Threat Hunting using Elastic Search.
• Created detection rules for malicious activities and Ransomwares
• such as Lockbit and Ryuk.

Sep 2020 – May 2021 · 8 mos

• Performed VAPT on Web applications and successfully exploited
• critical vulnerabilities such as SMTP takeover, MySQL injection,
• Misconfigured CORS, OTP bypass etc.
• Studied The Mitre Att&ck Framework and OWASP top 10.

Aug 2019 – Dec 2019 · 4 mos · New Delhi Area, India