Software Engineer in Customer Solutions Engineering Team

1. Designing network test plans and creating test cases.

2. Testing network protocols including TCP/IP, BGP, IGP, and L2/L3 control plane protocols (LACP,VRRP).

1. Implemented automated credential management with dynamic rotation and runtime retrieval to strengthen security.

2. Upgraded libraries for an internal migration tool, improving security and stability through rigorous testing.

3. Integrated a real-time vulnerability scanning solution to enhance security for cloud-based applications.

4. Conducted architecture reviews of third-party products, identifying and mitigating security vulnerabilities

5. Implemented fine-grained authorization to enable access control tailored to product owners.

6. Automated functional and unit tests, achieving 80% test coverage to ensure high-quality code.

7. Developed a custom plugin to enforce coding standards, improving code maintainability and consistency

Product Security Team @ Zeta | Directi

1. Integrated Security tools in CI pipelines ( XRay, Snyk, ClamAV, Gitleaks, Cosign, kubesec, tfsec)

2. Prepared Kubernetes Hardening Controls to be implemented across clusters

3. Vulnerability Assessment scans for all artifacts types

4. Hardware Security Module (HSMs) key plantation and key management

5. Runtime Security Implementation using Prisma Twistlock (CWPP)

6. Threat Modeling (STRIDE) using threagile tool

7. Cloud Asset Inventory PoC and Deployment (CloudQuery)

8. Integrated CSPM tool to run continuous compliance scan on cloud infrastructure (CIS, PCI-DSS)

Cloud Security:

1. AWS native solutions: IAM, RBAC, AWS Guarduty, AWS access analyzer, AWS access advisor, AWS inspector, AWS security hub, Cloudwatch

2. CSPM, CIEM, CWPP

1. Enabled Zero Trust for all internal applications to secure it from internet

2. Implemented Next Generation Antivirus for securing Endpoints

3. Enabled RBAC controls in AWS cloud, Kubernetes. Implemented RBAC for Linux servers using OpenLDAP

1.Infrastructure As Code : Automated and Managed the GCP Infrastructure using Terraform by applying necessary security controls

2. Built Certificate Mangement System to generate SAN certificates for multiple domains and rotate certificates in regular frequency

3. Secured Database Authentication by generating on demand credentials, which gets auto rotated regularly

4. Implemented an Active Directory setup to authenticate and Authorize internal users within the organisation across 15+ applications

5. Hardened Database by applying security controls

Containerization, CI/CD, SRE, Scripting, Automation