Ashutosh Surothia — Software Engineer

Cybersecurity Engineer | Software Engineer | Azure Cloud Security | DevSecOps & AppSec ​I am a Cybersecurity Professional at EY, specializing in securing high-stakes BFSI environments through Defense in Depth strategies. With a foundation in Software Engineering and 2.5+ years of experience across EY and TCS, I bridge the gap between secure architecture and scalable code. My focus is on hardening cloud-native applications and ensuring security is baked into the CI/CD pipeline, not added as an afterthought. ​🛡️ Cloud Security & Defense: I leverage the Azure Security ecosystem to protect enterprise assets. I am experienced in implementing Microsoft Defender for Cloud to monitor posture and remediate vulnerabilities across distributed environments. My approach follows the Zero Trust model, ensuring identity-driven security via OAuth 2.0 and IAAA principles. ​💻 Security Engineering (Java/DevSecOps): Because I speak "Developer," I don't just find vulnerabilities, I also provide the fix. ​AppSec: Expert in SAST/DAST using tools like Veracode and BurpSuite to secure Java-based Microservices. ​Automation: Building secure GitHub Actions and Jenkins pipelines to automate vulnerability scanning and compliance. For example In legacy system we have to do manual scanning by putting jar in Veracode but through GitHub Actions I automated scanning in pipeline itself, And it saved team from aditional work. ​Data Integrity: Managing secure PostgreSQL instances and optimizing performance via Redis without compromising the security perimeter. ​🚀 Key Impact & Recognition: ​Security First: Modernized BFSI applications for global leaders (MetLife, CNA), identifying and patching critical API vulnerabilities. ​Performance: Improved backend response times by 17% while maintaining a 100% secure audit trail. ​Champion: 1st Prize Winner at the PuneVerse Hackathon and TCS Secure Coding Challenge (2025). I am driven by the challenge of designing resilient, distributed systems that can withstand the modern threat landscape. Always learning, always hardening. Technical Core: Azure Cloud Security, Microsoft Defender, Defense in Depth, Java/Spring Boot Security, OAuth 2.0, CI/CD Security, Veracode, BurpSuite, Microservices Architecture.

Stackforce AI infers this person is a Cybersecurity Engineer specializing in Fintech and Cloud Security.

Location: Pune, Maharashtra, India

Experience: 2 yrs 11 mos