Feb 2024 – Feb 2026 · 2 yrs

• Developed and Integrated AI Models/Agents and conducted end-to-end security assessments like AI MAPs to identify architectural vulnerabilities; engineered custom guardrails and 'Security as Code' patterns to prevent prompt injection and data poisoning in production environments.
• Implemented Black Duck Signal across the SDLC to leverage agentic AI for real-time vulnerability remediation; utilized its multi-LLM code analysis to eliminate false positives and autonomously patch exploitable risks, significantly reducing developer friction."
• Architected an ecosystem with AI Driven Security tools (OPNSense NGFW/ Microsoft Sentinel SIEM/SOAR, Wazuh XDR and File Integrity Monitoring) to enforce Zero Trust Architecture in cloud and on-prem infrastructure along with Data loss prevention.
• Architected Zero Trust access models on Azure using Microsoft Entra (RBAC/PIM) and enforced continuous compliance (MCSB/NIST) via Azure Policy, ensuring a hardened, audit-ready infrastructure for sensitive workloads.
• Integrated workflows with custom automations that bridged the gap between organisation workflows to security scanning and security posture management.
• Carried out migrations of security tools with latest versions and integrating it with multiple CI-CD environments like (Jenkins, ADO, Travis, Github Actions) in their respective pipeline files for the projects of different technical stack.
• I have assessed and improved security tool detection capability by analysing( Prisma Cloud Security and IaC Checkov) results along with other AppSec tools with false positive ratios and enhanced the tools by tweaking the configurations leading to high performance.
• Designed, Developed and Maintained a security pipeline infrastructure that was an offering at the same time 100's of security assessors using it for their custom assessments on SAST, SCA, IAST, Container Scanning, IaC scanning and Secret Scanning.

Sep 2022 – Feb 2024 · 1 yr 5 mos

• Performed CI-CD security reviews in different environments to ensure there is no supply chain attack possibilities and we are safeguarding the environments with PoLP and Zero Trust Architecture
• I built and maintained cloud-native CI/CD pipelines for 100s of applications, integrating DevSecOps tools (SAST, SCA, Terraform/CloudFormation scanning etc.) to enforce security and compliance at scale.
• Identified and mitigated high-impact design vulnerabilities in multi-cloud application architectures by conducting Threat Modeling and Architecture Risk Analysis (STRIDE, PASTA).
• Onboarded hundreds of development projects on enterprise security tools like SRM, Polaris, and BlackDuck to improve compliance and threat visibility.
• Conducted in-depth SAST, SCA, IaC, DAST and Threat Modeling vulnerability assessments, generating detailed reports and remediation guidelines for NIST 800-53.
• Responsible for vulnerability triage for applications, prioritizing findings according to OWASP Top 10 and SANS Top 25 risks, and communicating mitigation strategies to both technical and non-technical stakeholders.