Vandan R. Email & Phone Number

Bengaluru, Karnataka, India

Worked extensively on Cloud and K8s security. Responsible for provisioning fine-grained access, security reviews of cloud infrastructure, runtime security of Hosts as well as containers, Programming automation such as slack bots for reducing manual labor. Performed incident response and investigation into XDR alerts. Also responsible for Product security.

India

As part of the Security Architecture team:* Coding up services (using Go) and Deploying them using Kubernetes* Acted as on-call for own services* Managing infrastructure using Terraform (AWS, Signal Sciences, GitHub...)* Helped create and deploy custom technical architecture.* Maintained the SOAR platform (playbooks, integrations, custom Python actions.

• Working on a project under the OWASPFoundation, Core rule set team.
• An open source project to automate theprocess of testing exploit PoCs against mod-security web application firewall runningrules from Core rule set.(Also, It's CI/CD friendly!)

Noida, Uttar Pradesh, India

• Worked on customer facing cloud security SaaS product
• Analysed, Audited and Remediated cloud compliance rules for AWSmanually as well as automatically using Python
• Created an automation for testing Terraform scripts and AWS Lambdafunctions.
• Automated Infrastructure deployment using Terraform.
• Automated the entire process of Client onboarding in GCP usingdeployment manager.
• Worked on services such as ECS, ECR, EC2, S3, IAM etc.

• Performed Monitoring of large client infrastructures
• Handling Detection alerts and helping the clients remediate securityissues.
• Worked with ELK Stack (as a SIEM), Arcsight and OSquery.
• created dashboards in Kibana for infrastructure monitoring
• Performed Threat Hunting using Elastic Search.
• Created detection rules for malicious activities and Ransomwaressuch as Lockbit and Ryuk.

• Performed VAPT on Web applications and successfully exploitedcritical vulnerabilities such as SMTP takeover, MySQL injection,Misconfigured CORS, OTP bypass etc.
• Studied The Mitre Att&ck Framework and OWASP top 10.

New Delhi Area, India