Hi, my name is

Architecting DevSecOps Pipelines: Architected and implemented comprehensive DevSecOps security scanning pipelines across 2,000+ production repositories, integrating SAST, SCA, Secret Scanning, Container Scanning and Dockerfile Scanning, resulting in 40% reduction in security vulnerabilities.

DevSecOps Pipelines Migration: Led large-scale migration to GitLab’s Pipeline Execution Policy from legacy compliance pipelines for 2000+ production repositories, modernizing security scanning processes while ensuring zero production disruption.

Pipeline Optimization: Reduced pipeline execution time by 35% through optimization of security scanning workflows and configuration improvements.

Developer Feedback: Enhanced DevSecOps pipeline templates through systematic troubleshooting and developer feedback, streamlining security scanning workflows and improving developer experience with optimized configurations.

Architecting Security Solution & Deployment: Engineered Heimdall, an in-house Automated Web and API Security Monitoring Solution, slashing external engagement costs by 20% through improved responsible disclosure programs. Orchestrated cloud deployment using GitHub Actions, Cloud Run, and Artifact Registry, ensuring seamless functionality.

SSDLC Automation & Integration: Key architect for developing "Argos", an organization-wide proactive automated SSDLC maturity model. This includes one-click enablement via platform engineering, instant on-demand security assessment, security maturity score, actionable insights for better decision-making and automated secure template integration for developers.

Collaborative Innovation: Worked with Engineering teams to pioneer R&D efforts to strengthen IKEA’s product security infrastructure, integrating advanced tools into CI/CD pipelines.

Pioneering Exploration (PoC): Led cross-functional teams in prototyping and implementing cloud-first security architecture, resulting in 30% improvement in security posture.

Automated Vulnerability Management: Reduced average response time to critical issues by 40% by streamlining the extraction of critical issues from Google Security Command Center (SCC), integrating real-time Slack notifications, and implementing a centralized dashboard for efficient triaging, follow-ups, and patching.

Enhanced Cloud Security: Pioneered Google Cloud access control policies and best practices. Led cloud vulnerability management, prioritizing fixes, detecting false positives, and reporting to stakeholders. Visualized vulnerabilities on an internal dashboard to deduce trends and make informed decisions for mitigation.

Detailed Documentation: Thoroughly documented Cloud Security findings investigations and research.

Shadow IT Asset Management: Resolved numerous DNS dangling issues associated with shadow IT assets, which were critical in preventing potential subdomain takeovers.

Bug Bounty Program Management: Investigated and resolved multiple issues reported by external Security Researchers on the Bug Bounty program.

Comprehensive Security Assessments: Conducted regular Penetration Testing, Threat Modeling, and Secure Code Reviews for Internal Products.

Security Awareness: Delivered 10+ engaging sessions with actionable cybersecurity strategies to non-security co-workers.

Cyber Threat Research & Automation Code: Spearheaded research on the latest cybersecurity threats and devised automation code for Vulnerability Scanners and External Attack Surface Management (EASM) platform.

Vulnerability Scanner Enhancement: Enhanced the effectiveness of the Automated Vulnerability Scanner by meticulously analyzing and incorporating insights from Pentester-discovered vulnerabilities, ensuring continuous improvement.

Modular Security Automation Code: Developed modular and efficient code for security automation plugins, optimizing functionality and scalability while ensuring comprehensive documentation.

Scrum-based Collaboration: Engaged in a scrum-based environment, leveraging tools like Jira, Bitbucket, and Confluence to foster efficient collaboration and streamline project management processes.

Test Case Development: Created comprehensive test cases using Pytest, ensuring robust and reliable performance of the Scanner.

Microservice API Development: Designed and implemented Backend Microservice APIs using Swagger, Postman, Flask, and MongoDB, contributing to the creation of a resilient and responsive ecosystem for security tools.