Led the implementation of DevSecOps strategies to embed security practices earlier in the development lifecycle, fortifying the security stance and reducing risks across 200+ Application services.Revamped the outdated manual Release Management Process of qTest by orchestrating a balance between automation and rigorous security protocols.Guiding a team in conducting thorough security analyses, detecting and addressing potential threats spanning multiple layers of the infrastructure.Deployed measures to evaluate and mitigate security risks associated with the utilization of open-source components, advocating for secure development methodologies through JFrog.Provided comprehensive training and mentorship to development teams on integrating robust security controls into the software development lifecycle.Serving as a trusted advisor, offering valuable insights and recommendations for the effective implementation of DevSecOps principles across various teams.

Led the implementation of DevSecOps strategies to embed security practices earlier in the development lifecycle, fortifying the security stance and reducing risks across 200+ Application services.Revamped the outdated manual Release Management Process of qTest by orchestrating a balance between automation and rigorous security protocols.Guiding a team in conducting thorough security analyses, detecting and addressing potential threats spanning multiple layers of the infrastructure.Deployed measures to evaluate and mitigate security risks associated with the utilization of open-source components, advocating for secure development methodologies through JFrog.Provided comprehensive training and mentorship to development teams on integrating robust security controls into the software development lifecycle.Serving as a trusted advisor, offering valuable insights and recommendations for the effective implementation of DevSecOps principles across various teams.

Partnered with operations teams to bolster security across four AWS accounts. Spearheaded DevSecOps strategies to support a SOC2 certification candidate project, driving the implementation of essential controls. Established streamlined DAST and SAST workflows for three key projects. Engaged closely with SOC2 stakeholders to deploy critical engineering and platform controls. Implemented AWS CIS benchmark assessments utilizing Prowler. Instituted a comprehensive security awareness program, including bi-monthly communication, interactive sessions, and tailored training for new team members and interns.

Led comprehensive security testing initiatives including risk analysis, test plan preparation, and vulnerability assessments across applications, infrastructures, and repositories. Utilized tools like ZAP, Anchore, Clair Scanner, NMAP, and Nessus to verify and mitigate security risks. Automated security processes within DevOps, streamlined report generation, and trained teams on secure coding practices.