Vasanth K Email & Phone Number

Remote

Led the PCI compliance effort for Five Below by implementing comprehensive guardrails across all AWS and Azure infrastructure, ensuring a secure and compliant environment for customer transactions.Designed and implemented a centralized logging (CloudTrail) solution for all AWS accounts, enhancing visibility into system activities and improving incident response capabilities.Orchestrated the development of a centralized backup strategy (AWS Backup Services), ensuring data integrity, availability, and recoverability for critical data and infrastructure components.Remediated all vulnerabilities identified by AWS Security Hub across AWS accounts, demonstrating a proactive and vigilant approach to security.Championed the adoption of Infrastructure as Code (IAC) principles using Terraform, writing scripts to automate deployment processes and ensuring consistency across environments.Designed and Developed pipelines for Kubernetes deployment using helm and Jenkins.Integrated security practices seamlessly into the software development lifecycle, ensuring a proactive approach to threat mitigation and compliance with industry standards.Collaborated with cross-functional teams to establish and enforce security best practices, fostering a security-first culture within the organization.Conducted in-depth security assessments and risk analyses, identifying vulnerabilities, and implementing effective controls to safeguard critical assets.Orchestrated the development of security automation scripts and tools, optimizing operational efficiency and reducing response times.Acted as a key point of contact for DevSecOps operations, providing expertise and guidance to teams involved in the development, deployment, and maintenance of applications.Collaborated with external auditors (IBM) to ensure successful PCI compliance assessments, resulting in a secure and compliant environment for customer transactions.

Remote

Spearheaded on-premises cloud security initiatives for American Airlines, ensuring the robustness and compliance of the organisation's infrastructure.Implemented multi-factor authentication (MFA) for Linux hosts, enhancing the security posture of critical systems and data.Successfully resolved vulnerabilities across a vast network of 50,000 hosts, demonstrating expertise in vulnerability management and proactive risk mitigation.Spearheaded ongoing hardening initiatives for compute and storage infrastructure, ensuring a proactive and continuously improving security posture.Conducted penetration testing on IT services, identified vulnerabilities, and collaborated with system owners on effective remediation strategies.Led troubleshooting efforts and provided escalation and communication for Critical or High Priority IT incidents within American Airlines' internal IT systems, reducing resolution time on system outages.Played a key role in the continuous monitoring and analysis of Infrastructure as Code (IAC) software to ensure its hardening. Conducted both static and dynamic code analysis to identify and address security vulnerabilities.Worked closely with system owners to address findings from red team penetration testing, ensuring that security measures were robust and effective.Collaborated with cross-functional teams to develop and enforce security best practices, fostering a culture of security awareness and responsibility.Utilized industry-standard tools for monitoring and analysis, ensuring prompt response to security incidents and threats.Acted as a subject matter expert on incident response, providing guidance to internal teams and contributing to the development of incident response plans.Participated in the development and execution of security awareness programs to educate staff on the importance of security measures and protocols.

St Louis, Missouri, United States

Implemented GitOps practices using Terraform and Ansible to automate infrastructure management, ensuring consistent, version-controlled deployments across multiple environments. Spearheaded the hardening of Linux systems by applying CIS benchmarks, enhancing security compliance across multiple environments.Successfully integrated Linux systems with Active Directory (AD) using Vintella, enabling centralized user authentication and access management.Provided technical support to users, diagnosing and resolving login and access-related issues to ensure seamless operations.Monitored system logs and network activity through Splunk to detect suspicious behavior and promptly mitigate security threats.Developed and configured Splunk dashboards for real-time analysis, enabling quick identification and response to security incidents.Developed and implemented comprehensive access control policies, including Discretionary Access Control (DAC), Role-Based Access Control (RBAC), and Rule-Based Access Control to enhance system security and data protection.Ensured precise user permissions and minimized security risks by aligning access controls with organizational requirements and compliance standards.Led vulnerability management efforts by conducting regular scans, identifying security weaknesses, and prioritizing remediation across Linux systems in compliance with NIST SP 800-53 standards.Collaborated with cross-functional teams to deploy patches and mitigate vulnerabilities, reducing the risk of security breaches and ensuring adherence to industry best practices.Implemented Public Key Infrastructure (PKI) solutions using Microsoft Certificate Services or OpenSSL for on-premises certificate issuance, renewal, and revocation.Produced detailed documentation and provided training for new and existing solutions to Implementation and Operations teams.