Headline

Microsoft Cloud Security Engineer | 6+ Years | Defender for Cloud · Sentinel · Entra ID | MITRE ATT&CK · Zero Trust · CSPM | HIPAA/HITRUST Audit Ready

About

Microsoft Cloud Security Engineer with 6+ years of experience securing and governing enterprise Azure and AWS environments across industries including healthcare and financial services. I specialize in Microsoft Defender for Cloud, Microsoft Sentinel (SIEM/SOAR), and Entra ID — with a proven track record of delivering measurable security outcomes. Key achievements: • Reduced incident response times by 35% through optimized SOC operations and proactive threat detection • Achieved 100% HIPAA/HITRUST audit readiness across enterprise cloud environments • Drove 40% reduction in cloud costs through secure resource optimization across multi-subscription Azure environments What I do: • Configure and tune Sentinel analytics rules mapped to the MITRE ATT&CK framework • Remediate Defender for Cloud CSPM recommendations across compute, identity, network, and data layers • Implement Zero Trust architecture across cloud workloads, identity, and network layers • Enforce governance and compliance using Azure Policy, RBAC, PIM, and Conditional Access • Conduct IAM security assessments, cloud risk assessments, and executive security reporting • Deploy cloud infrastructure following DevSecOps best practices using Terraform and Bicep Certifications: AZ-900 · AZ-700 Open to Microsoft Cloud Security Engineer, Azure Security Architect, and SOC/Cloud Security Lead roles at organizations prioritizing enterprise security excellence.

Location

Hyderabad

Work experience

Cloud Security Engineer at TechStar Group, Feb 2025 - Present · 1 yr 5 mos, Hyderabad, • Configured and tuned Microsoft Sentinel analytics rules mapped to the MITRE ATT&CK framework, improving threat detection coverage across enterprise Azure environments • Remediated Microsoft Defender for Cloud CSPM recommendations — closing EDR configuration gaps, antivirus compliance failures, and DDoS IP Protection misconfigurations across multi-client Azure subscriptions • Integrated the full Microsoft Defender suite (Defender for Cloud, Cloud Apps, Office 365, and Identity) to deliver unified protection across cloud workloads, SaaS applications, email, and identity layers • Onboarded Microsoft Defender telemetry into Microsoft Sentinel for centralized correlation, incident analysis, and SOC visibility across managed environments • Enforced organizational compliance standards across Azure subscriptions using Azure Policy, driving governance consistency and audit readiness • Administered Entra ID / Azure AD including Conditional Access, RBAC, PIM, and formal User Access Review (UAR) processes for HIPAA-regulated environments

Sr. Technology Consultant at EY, May 2024 - Jul 2024 · 3 mos, India, • Identified and assessed cloud security risks across enterprise Azure environments, applying Zero Trust principles to strengthen identity, network, and workload security defenses • Conducted comprehensive IAM security assessments — evaluating RBAC configurations, privilege escalation risks, and access governance gaps across cloud environments • Investigated and remediated critical cloud security incidents, supporting rapid containment and root cause analysis for enterprise workload security events • Developed and enforced security policies aligned to regulatory and compliance frameworks, ensuring adherence to stringent enterprise security standards • Delivered detailed risk assessments and security reports to both technical teams and C-suite stakeholders, enabling data-driven security investment decisions

Sr. Cloud Engineer at Genzeon, Apr 2023 - May 2024 · 1 yr 2 mos, India, • Configured advanced cloud security monitoring using Amazon CloudWatch, Microsoft Defender for Cloud, and Alert Logic — enabling unified visibility across hybrid cloud environments • Performed recurring vulnerability assessments across Azure App Services, SQL, and Storage Accounts, identifying and remediating security risks before exploitation • Implemented Zero Trust network segmentation, coordinating patching and system hardening activities to reduce attack surface across cloud infrastructure • Deployed cloud infrastructure using Terraform and Bicep following DevSecOps best practices, embedding security controls into the provisioning pipeline • Produced detailed compliance and security reports for leadership and audit teams, ensuring transparency across security posture and remediation progress

Senior System Analyst at Sonata Software, Dec 2021 - Apr 2023 · 1 yr 5 mos, Bengaluru, • Optimized Azure resource utilization, achieving a 40% reduction in cloud costs while enforcing strong IAM controls and least privilege access governance • Implemented cloud security standards across Azure environments, ensuring comprehensive data protection, access governance, and regulatory compliance • Managed Azure Virtual Machines and network components including routine patching, maintenance, and performance optimization across enterprise infrastructure • Executed server upgrades, migrations, and infrastructure modernization initiatives — improving system stability and security baseline across the environment • Maintained detailed system configuration documentation and operational procedures to support audit readiness and change management workflows

Education

Bachelor of Technology - BTech, Mechanical Engineering, vignan university