Suresh K. Email & Phone Number

California, United States

Foster City, California, Us

• Designed and implemented secure AppSec architecture for Visa’s blockchain, tap-to-pay, click-2-pay, and secure multi-party computation services, achieving a 90% reduction in vulnerabilities and fortifying transaction security through proactive, layered defense strategies.• Architected comprehensive cloud security solutions for Visa’s payment applications, leading the migration of Visa’s on-premises Hyperledger Besu blockchain to a private AWS environment to enhance scalability, cost-efficiency, and security. This migration involved deploying Hyperledger Besu on AWS with Jenkins for continuous integration, AWS ECR for container storage, and Amazon EKS for Kubernetes management.• Collaborated with third-party services for smart contract auditing, utilizing static and dynamic analysis to reinforce security. Leveraged AWS services, including IAM, KMS, CloudTrail, AMB (Amazon Managed Blockchain), and network security best practices to protect Visa’s payment systems, improve compliance by 35%, and secure cloud-hosted sensitive data, ensuring proper handling of big data and crypto transactions throughout the migration process.• Implemented automated security tools and processes using generative AI and Mermaid JavaScript, boosting efficiency by 80% and reducing manual tasks by 20%. Monitored development processes to identify and resolve security issues throughout the software lifecycle, improving resolution time by 40% and reducing production defects by 30%.• Drove the design, implementation, and optimization of secure web, API, and mobile applications for projects such as Click-to-Pay, Tap-to-Services, Kernel in the Cloud, and Visa Basic Acceptance Services, achieving a 40% reduction in incidents and a 35% improvement in compliance. Conducted security reviews, threat modeling, and deep design sessions to proactively address vulnerabilities, reducing exploit risks by 30%.

Pleasanton, California, Us

Managed Microsoft Azure Cloud, Endpoints, Email, third party API’s and Data security for about 15000+ users benchmarking against NIST, CIS and PCI frameworks. • Cloud Security: Developed, automated, implemented, and operated controls to secure Microsoft Azure cloud platform utilizing Sentinel, PIM (Privileged Identity Management), Intune and AD Identity Protection integrated with cloud-based API’s. Improved secure score by 25% each quarter. • Secure Software Development Life Cycle: Developed an enterprise application security risk management embedded in software development lifecycle. Secured risk assessments included threat modeling, code reviews, static and dynamic code analysis, vulnerability scans, application logging and monitoring. Improved compliance by 60% reducing risk across portfolio engineering and protecting PCI, PII and Intellectual property data.• Email Security: Investigated malicious phishing emails, domains and IPs using open-source tools and recommended appropriate controls based on analysis. Analyzed email messages reported by employees to determine correct classification (spam, spoof, malware). Through innovated phishing email awareness program for users to prevent opening malicious email, attachments, and links reduced user click rate by 25%.• Security Operations: Performed investigative malware analysis, pattern recognition and profile building for identifying malicious actors on the network. Analyzed and provided counter measures for security related threats as a part of the Incident Response team using SIEM’s like Microsoft Azure Sentinel, Crowdstrike and firewalls like Incapsula and Palo Alto networks. Designed and developed visualizations, reports, dashboards, and alerts to fit assigned use cases. Invested 20% of my time in doing architecture reviews, threat modeling, code reviews, trainings, and consultations to software developers.

Oakland, Ca, Us

Managed enterprise content management architecture for 1500+ users using scalable models including cloud computing, container deployments, virtualization, micro services, Mulesoft APIs and software solutions ensuring high availability, incident response, scalability, service-oriented/API governance to accomplish business goals.• Secure Development Life Cycle: Developed an enterprise application security risk management embedded in software development lifecycle. Secured risk assessments included threat modeling, code reviews, vulnerability scans, pen-testing, application logging. Improved compliance by reducing risk across portfolio engineering and protecting data. For example, OWASP TOP 10 principles are implemented using SSL/TLS protocols, data encryption, API security, SIEM, and HTTP methods. • Governance, Risk Control: Managed cybersecurity risk by benchmarking against security frameworks including ISO 27000, NIST, and CIS critical controls baseline. Defined risk methodologies for compliance metrics and report risk quarterly to Information Security Operations team.• Security Awareness Trainings: Innovated phishing email awareness program for users to prevent opening malicious email, attachments and links. Reduced the user click rate by 25%. Developed and lead trainings focused on OWASP Top 10 to prevent vulnerabilities early in the development lifecycle for engineering teams. • Cloud Implementation: Implemented AWS Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) securely using IAM, SES, EC2, S3, VPC, SNS, lambda features standardizing email framework automating and enforcing security standards. Reduced operational costs by 50%.• Enterprise Content Management: Migrated content management from IBM FileNet P8 to Onbase Cloud environment improving user experience, reducing licensing cost and operational overhead.

Oakland, Ca, Us

Implement policies, procedures, and technologies to ensure Citrix system security through secure system access, monitoring, control, and routine security evaluations.Perform tasks necessary to fulfill service level agreements with end users regarding Citrix- served application availability and security including file system and database configuration and management.Assist in deployment of new Citrix patches and software updates according to best practices.Participate in and support capacity planning and the development of long-term strategic goals for Citrix systems, software, and clients in conjunction with end users and department managers.Analyze Citrix application usage to support long-term strategy and network capacity and/or licensing.Collaborate with analysts, application developers, and system owners in the testing of Citrix programs, applications, and interoperability.Develop, document, and maintain policies, procedures, and associated training plans for both Citrix system administration and end-user access.

Mumbai, Maharashtra, In

PROJECT – END USER COMPUTING – TECHNICAL INFRASTRUCTUREPOSITION – CITRIX ENGINEER/ TEAM LEAD• Leading the End User Computing team which comprises of 4 projects namely: Desktop Support Integration, Virtual Application Delivery, Thin Client Integration and File Sharing Services.• Managing work in take and distribution for various development and support projects for EUC.• Posing as an engagement layer between customer and TCS senior management to maintain a healthy ongoing relationship between the two.• Primarily required to understand business requirements and identify/employ the necessary resources and technology to translate their needs into a feasible technical solution while adhering to the set guidelines.• Ensure all Change management, incident management, risk management processes are followed at all times during the course of delivery of a project/task.• Improve onsite-offshore co-ordination between various teams operating out of different geographical locations and identify new opportunities for offshorability.• Review ideas and initiatives on technical enhancements or upgrades to gauge technical benefits Vs cost involved so that a rational decision can be taken in the best interest of the customer.• Ensure all project deliverables are well documented and indexed for reference audit needs. Responsible for keeping the knowledge database and known error database updated and useful.• A key member of the Business Consulting Group which identifies new opportunities and works towards a response to a Request For Proposal by various organizations. Supply these bids with technical and financial inputs during the course of the bid process.• Responsible for half yearly and annual performance appraisals of all members of the team at onsite and offshore. These appraisals are based on a number of goals that must be achieved during the appraisal period.

Bangalore, Karnataka, In

Master'S Degree, Engineering In Data Science

Master'S Degree Information And Cybersecurity (Mics), Cyber/Computer Forensics And Counterterrorism

Bachelor'S Degree, Computer Science

Computer Science