Headline

Sr. Cyber security engineer

About

Certified ethical hacker with 4+ years of experience in testing system securities for vulnerabilities and patching them. Worked with globally leading known clients . Seeking a position to utilize my skills and abilities in cyber security field that offers professional growth while being resourceful, innovative and flexible. My key skills are Patch management , SIEM Vulnerability Scanning , Network Scanning , IP Monitoring , Vulnerability Assessment and Management .

Location

Bengaluru

Work experience

Cyber Security Engineer at Siemens Healthineers, Jul 2025 - Mar 2026 · 9 mos, Bengaluru, Karnataka, India, Led end-to-end infrastructure and operating system vulnerability management lifecycle including asset discovery, risk-based prioritization, remediation governance, and validation. Performed risk-based vulnerability assessments considering CVSS, exploit availability, asset criticality, and business impact. Administered Qualys, Tenable Nessus physical/ virtual scanner appliances and cloud agents, ensuring optimized scan coverage across enterprise environments. Engineered scan templates and rapid response strategies for zero-day vulnerabilities and emerging threats. Implemented data protection and privacy controls aligned with GDPR principles (data minimization, lawful processing, etc.) Ensured secure handling of Protected Health Information (PHI) under HIPAA guidelines. Assisted in internal and external audits for ISO 27001 certification and surveillance audits. Collaborated with SOC and IT operations teams to validate exploitation attempts and support incident response activities related to high-risk vulnerabilities. Managed remediation workflow through Qualys–ServiceNow integration, ensuring SLA adherence and executive risk visibility. Conducted thorough risk assessments using CVE IDs of the vulnerabilities found using frameworks like NIST, MITRE,Secure SDLC, OWASP and also followed the GRC principles. Used ServiceNow for raising the tickets. Used SAP for signing, maintaining and storing the relevant documents. Conduced post-remediation validation scans and oversee residual risk handling through structured exception processes. Identified misconfiguration and exposure risks in containerized workloads and Kubernetes-based platforms. Supported Azure-hosted workloads by reviewing security posture, RBAC configurations, and network exposure risks. Carried out source code reviews to minimize the risk of patch installation failures. Delivered executive dashboards and technical risk reports to stakeholders and leadership teams.

Product cyber security Engineer II at Cepheid, Oct 2023 - Jun 2025 · 1 yr 9 mos, Bengaluru, Karnataka, India, Majorly worked on patch management, vulnerability management, qualys, tenable nessus , crowdstrike, vulnerability scanning, vulnerability assessment, SIEM

Security Analyst at Wipro, Jun 2021 - Aug 2023 · 2 yrs 3 mos, Bengaluru, Karnataka, India, * Monitor and triage data from multiple sources to identify suspicious and malicious activity. * Perform all stage of incident response from detection to post mortem * Manage InfoSec ticket queue to conduct investigation, and document resolution * Provide support to Vulnerability Management Program, generate vulnerability reports, and perform internal/external scans * Conduct Vulnerability Assessments and Penetration Testing. * Prepare Document and Maintain Procedures, Response Plan, Runbooks, and associated processes for continuous improvement

Education

Bachelor of Technology - BTech, Computer Science, SRM IST Chennai

12th Standard, PHYSICAL SCIENCES, Him Academy Public School