Currently a member of DSPM team collaborating with PM, DevOps, Security architect to understandrequirements. Researched & Implemented comprehensive security standards including 100+ DSPMpolicies for various cloud services analyzing different attack paths and ensuring data integrity.Development and automation of Infrastructure as Code to automatically provision Kubernetesinfrastructure setup using terraform. Managed CI/CD with Azure DevOps and Git Actions.Implemented real-time monitoring and alert systems using various cloud services, mitigating security risks. Achieved minimum 75% compliance with stringent CIS standards and reduced total infrastructure expenditure by 30%.Managing kubernetes cluster in AWS, Handling internal project management tools like Jira, Jenkins,Github, andautomation of administrative tasks.

Worked on CNAPP product, ensuring security of data and applications on AWS, Azure, and GCP Cloud Services. Developed cutting-edge solutions and automation using CSP-provided tools like AWS Inspector, Config, Security Hub, and Azure Defender.Conducted forensic research and enriched product with various set of security rules based onvulnerability, public exposure, malicious access, abnormal/unused permissions & credentials.Automation of cloud resources using terraform templates to create test bed for all security rules. Also worked on IaC template scanning solution to prevent potential security misconfiguration.Worked closely with customers on onboarding, understanding requirements, product gaps, limitations providing RCA and solutions over the same.

Utilised Kubernetes and Helm for research. Implementation of Public Cloud and Kubernetes 400+ best practices, Worked on addition of various compliance benchmark and standards.Overseeing deployment, Git action, repo checks, branching and access. Cloud Governance, Costmanagement and automation to identify and cleanup of stale resources.Automating scale testing using python scripts and terraform for deployment, cleanup of cloudresources, Analysing KPIs and impact, behaviour on application creating scale test reports.Managing application environment and platform hosted on Azure, Automated vulnerabilityscanning and remediation for Windows and Linux OS Baseline.

Handled continuous deployments on local environments, Management of Azure DevOps Pipeline.Implementation of various 500+ CSPM based security policies and integration of automatedremediation solution for Major Public Cloud Services.Researched and automation of OS Baseline Harding scripts on major Images in use, Management ofCSP provided cloud security tools like AWS Config, Inspector, SecurityHub, Azure Defender.Performed SRE activities, Creation of Azure DashBoard to monitor various services in use.

Contributed to multiple projects and worked on various internal innovations during my tenure, primarilyfocused on AWS and Azure.Led the proof of concept and implementation of real-time automated remediation of AWS resources witha serverless architecture, reducing response time and minimizing manual intervention.Conducted research and development of best practices for various AWS services, ensuring adherenceto industry standards and security protocols.Automated the deployment of compliant, non-compliant, and deletion of various AWS resources,streamlining the process and reducing manual errors.Created custom APIs with AWS Python Boto3 SDK, enabling efficient integration with other systemsand applications.Implemented OS BaselineSecurity Best Practices Hardening Scripts for Debian, Ubuntu, andWindowsOS, enhancing security measures and minimizing risks.