Apr 2022 – Mar 2025 · 2 yrs 11 mos · Bengaluru, Karnataka, India

• At Postman, I strengthened both application and cloud security through a blend of hands-on testing, architectural design, and security program development. My focus was on proactive risk reduction and measurable maturity improvements across the organization.
• Pentesting & Security Assessments: Led deep-dive penetration tests and red-team style assessments, identifying OWASP Top 10 vulnerabilities, misconfigurations, and supply chain risks across services.
• Maturity Scorecards: Designed and rolled out a security maturity scorecard to measure readiness across units, covering vulnerability management, secrets scanning, cloud misconfigurations, and developer adoption of secure practices.
• Threat Modeling (STRIDE): Embedded structured threat modeling workshops with engineering teams to address Spoofing, Tampering, Repudiation, Information Disclosure, DoS, and Elevation of Privilege at the design stage.
• AWS Cloud Security: Built a secure AWS landing zone, enforcing guardrails with IAM, VPC isolation, encryption, and continuous compliance monitoring.
• Governance & Enablement: Created practical security frameworks balancing developer velocity with risk management, ensuring teams could innovate securely without friction.

Jan 2021 – Apr 2022 · 1 yr 3 mos · Bangalore Urban, Karnataka, India

• As a Specialist Cyber Security Consultant at CyberSec Solutions, my primary focus has been on securing cloud infrastructure and containerized environments with an emphasis on Terraform, Docker, and Kubernetes. Leveraging open-source tools such as Checkov, Gitleaks, and Terrascan, I've played a pivotal role in enhancing security postures through proactive scanning, monitoring, and automated response mechanisms.

Jun 2019 – Jan 2021 · 1 yr 7 mos · Greater London, England, United Kingdom · On-site

• As a DevSecOps and Cloud Security Engineer at Intuit, I have ensured the robust security posture of our cloud-based applications and infrastructure. My role revolves around seamlessly integrating security measures throughout the software development lifecycle, harmonizing development, security, and operations to uphold the highest cybersecurity standards.

Feb 2018 – May 2019 · 1 yr 3 mos · Greater Bengaluru Area · On-site

• At Matellio, I architected and deployed a security-hardened Big Data pipeline for our network security product, combining ELK, Kafka, and Apache Spark with a Kubernetes-based platform. My work emphasized not only scalability and reliability but also security by design, aligned with STRIDE principles:
• Implemented secure streaming and log pipelines with encryption and integrity validation to prevent tampering and data leakage.
• Designed Kubernetes clusters with RBAC, namespace isolation, and network policies to minimize privilege escalation and spoofing risks.
• Established tamper-resistant logging and audit trails to strengthen accountability and support compliance.
• Built resilient, auto-scaling infrastructure to withstand denial-of-service threats while maintaining high availability.
• This combination of DevOps, SRE, and security engineering enabled Matellio to process massive volumes of sensitive network data in real time, while maintaining a strong defense posture.

Feb 2017 – Mar 2018 · 1 yr 1 mo

Jun 2014 – Mar 2018 · 3 yrs 9 mos

• To provide the company a framework for APE architechture with all the services up and running so that the whole system can recognize and analyse the incoming traffic and enrich the traffic data with more information and process the whole bunch through various streaming process and rules engines.