Hi, my name is

Architecting Security Solution & Deployment: Engineered Heimdall, an in-house Automated Web and API Security Monitoring Solution, slashing external engagement costs by 20% through improved responsible disclosure programs. Orchestrated cloud deployment using GitHub Actions, Cloud Run, and Artifact Registry, ensuring seamless functionality.

DevSecOps Scorecard & Platform Engineering: Pioneered scorecard technique for instant DevSecOps assessment, leading to better decision-making and increased security awareness with a centralized organizational dashboard.

Collaborative Innovation: Worked with Engineering teams to pioneer R&D efforts to strengthen IKEA’s product security infrastructure, integrating advanced tools into CI/CD pipelines.

Pioneering Exploration: Collaborated cross-functionally to prototype and implement scalable solutions, driving a cloud-first architecture.

Automated Vulnerability Management: Streamlined the extraction of critical issues from Google Security Command Centre (SCC) with real-time Slack notifications and centralized dashboard visualization, optimizing response time, triaging, follow-ups, and patching.

Enhanced Cloud Security: Pioneered Access Control Policies for Google Cloud Projects, resolved DNS Dangling Issues and formulated Best Practices Policies.

Detailed Documentation: Thoroughly documented Cloud Security findings investigations and research.

Bug Bounty Program Management: Investigated and resolved multiple issues reported by external Security Researchers on the Bug Bounty program.

Comprehensive Security Assessments: Conducted regular Penetration Testing, Threat Modeling, and Secure Code Reviews for Internal Products.

Security Awareness: Delivered 10+ engaging sessions with actionable cybersecurity strategies to non-security co-workers.

Cyber Threat Research & Automation Code: Spearheaded research on the latest cybersecurity threats and devised automation code for Vulnerability Scanners and External Attack Surface Management (EASM) platform.

Vulnerability Scanner Enhancement: Enhanced the effectiveness of the Automated Vulnerability Scanner by meticulously analyzing and incorporating insights from Pentester-discovered vulnerabilities, ensuring continuous improvement.

Modular Security Automation Code: Developed modular and efficient code for security automation plugins, optimizing functionality and scalability while ensuring comprehensive documentation.

Scrum-based Collaboration: Engaged in a scrum-based environment, leveraging tools like Jira, Bitbucket, and Confluence to foster efficient collaboration and streamline project management processes.

Test Case Development: Created comprehensive test cases using Pytest, ensuring robust and reliable performance of the Scanner.

Microservice API Development: Designed and implemented Backend Microservice APIs using Swagger, Postman, Flask, and MongoDB, contributing to the creation of a resilient and responsive ecosystem for security tools.