Hi, my name is

Architected Container Security Framework & Security Policies: Spearheaded unified container-scanning framework and governance model, standardizing vulnerability checks for Docker images across all development teams while designing and enforcing JFrog Xray policies (severity gates, CVE exemptions, whitelists) to achieve 100% compliance and accelerate remediation cycles.

Orchestrated CI/CD-Native Security Enforcement: Integrated JFrog Xray container security scans into Harness CI/CD pipelines at both build and deploy stages, automating checks that block non-compliant images and improving vulnerability detection by 50%.

Led Container Scanning Tool Evaluation: Directed comparative analysis of industry tools (JFrog Xray, Trivy, Grype) against criteria including detection accuracy, performance impact, cost, and API support—piloting top choice to boost scan throughput without affecting pipeline SLAs.

Architecting DevSecOps Pipelines: Architected and implemented comprehensive DevSecOps security scanning pipelines across 2,000+ production repositories, integrating SAST, SCA, Secret Scanning, Container Scanning and Dockerfile Scanning, resulting in 40% reduction in security vulnerabilities.

DevSecOps Pipelines Migration: Led the migration of 2,000+ production repositories to GitLab’s Pipeline Execution Policy, ensuring seamless transition with zero production disruption.

Pipeline Optimization & Developer Collaboration: Optimized pipeline execution time by 35% through workflow and configuration enhancements, while refining pipeline templates based on systematic troubleshooting and developer feedback to improve overall efficiency and developer experience.

Architecting Security Solution & Deployment: Engineered an in-house Automated Web and API Security Monitoring Solution, reducing external engagement costs by 20% through improved responsible disclosure programs. Orchestrated cloud deployment using GitHub Actions, Cloud Run, and Artifact Registry.

SSDLC Automation & Integration: Key architect for developing "Argos", an organization-wide proactive automated SSDLC maturity model. This includes one-click enablement via platform engineering, instant on-demand security assessment, security maturity score, actionable insights for better decision-making and automated secure template integration for developers.

Collaborative Innovation & Pioneering Exploration (PoC): Spearheaded collaborative R&D initiatives with cross-functional engineering teams to enhance IKEA’s product security infrastructure by integrating advanced tools into CI/CD pipelines and prototyping cloud-first security architectures, resulting in a 30% improvement in overall security posture.

Automated Cloud Vulnerability Management & Visualization: Built an end-to-end triage and notification system with centralized dashboard for Google Security Command Center (SCC) that slashed critical-issue response time by 40%.

Governance, Controls & Documentation: Architected Google Cloud access-control policies and optimized vulnerability workflows, while maintaining comprehensive investigation and research documentation to drive informed mitigation decisions.

Shadow IT Asset Management: Resolved numerous DNS dangling issues associated with shadow IT assets, preventing potential subdomain takeovers.

Managed Bug Bounty Program: Investigated and resolved multiple issues reported by external Security Researchers.

Security Awareness: Delivered 10+ engaging sessions with actionable cybersecurity strategies to non-security co-workers.

Cyber Threat Research & Automation Code: Researched on the latest cybersecurity threats and devised automation code for Vulnerability Scanners and External Attack Surface Management (EASM) platform.

Vulnerability Scanner Enhancement: Enhanced Automated Vulnerability Scanner effectiveness by analyzing and incorporating insights from Pentester-discovered vulnerabilities, ensuring continuous improvement.

Security Automation & Testing: Developed modular and efficient security automation plugins with comprehensive documentation and robust test cases using Pytest to ensure optimal functionality, scalability, and reliability of the Scanner.