Headline

Securing Keka| CISA | CISM | 3x AWS Certified|Securing Cloud Infrastructure, Automating Security

About

As the Cloud Security Architect at Gameskraft, I drive end-to-end security across cloud, infrastructure, and applications while enabling developer velocity. My role includes securing AWS environments with strong IAM and SCP controls, integrating shift-left security into Jenkins pipelines (SAST, SCA, DAST, IaC, secret scanning), deploying CSPM tools, and strengthening EKS and container security. I lead SIEM implementation with Wazuh/OpenSearch, manage vulnerabilities via Jira with remediation playbooks, and oversee VAPT and penetration testing. Alongside technical execution, I mentor interns, collaborate with DevOps and Product teams, and build a security-first culture aligned with compliance frameworks like ISO27001, SOC2, and GDPR.

Location

Bengaluru

AI stack

claude code

cursor

gemini

grok

kiro

langchain

Work experience

Principal Software Engineer - Security at Keka HR, Jul 2026 - Present · 2 mos, Bengaluru, Spearhead Keka’s end-to-end security initiatives by integrating security protocols throughout the entire engineering lifecycle. Responsible for architecting and scaling a comprehensive security program encompassing Application Security (AppSec), cloud infrastructure, Azure DevOps, CI/CD pipelines, API security automation, secure architectural design, security tooling, continuous monitoring, and organizational security awareness. Collaborate cross-functionally with engineering, DevOps, and product teams to proactively identify risks, automate security controls, fortify Keka’s overall security posture, and cultivate the development of secure-by-design products and platforms.

Lead Security Engineer at Sequoia, Nov 2025 - Jul 2026 · 9 mos, Bengaluru, • Led product security initiatives focusing on threat modeling, API security, and mobile security. • Implemented security automation processes to enhance code review and AI security measures. • Developed and managed IAM and WAF solutions to safeguard cloud security effectively.

Application Specialist at Gameskraft, Jan 2025 - Nov 2025 · 11 mos

Security Architect at Gameskraft, Jan 2025 - Oct 2025 · 10 mos, Bengaluru, I lead cloud and application security initiatives across a highly distributed gaming platform handling petabyte-scale traffic. My focus is embedding security by design into every stage of the SDLC while ensuring scalability, compliance, and resilience. • OWASP Alignment: Drove adoption of automated pipelines addressing OWASP Top 10 risks—securing APIs, preventing injection flaws, strengthening authentication/authorization, and reducing data exposure through encryption and access controls. • STRIDE Coverage: • Spoofing / Elevation of Privilege – Enforced RBAC, IAM guardrails, and Kubernetes/EKS namespace isolation. • Tampering / Repudiation – Built tamper-resistant audit trails, IaC scanning, and GitHub Advanced Security for code integrity. • Information Disclosure / DoS – Implemented secret scanning, runtime security with Wiz & Orca, and auto-scaling to withstand denial-of-service scenarios. • Security as Code: Designed automated pipelines for SAST, DAST, IaC, and container scanning with tools like Semgrep, Wiz, Orca, and GitHub Advanced Security. • Governance & Threat Modeling: Defined security roadmaps, threat models, and compliance frameworks, aligning technical controls with both industry standards and real-world attack scenarios. By combining OWASP best practices, STRIDE threat modeling, and cloud-native security automation, I help Gameskraft scale securely while protecting user trust and sensitive data.

Enterprise Security Lead/Architect at Postman, Apr 2022 - Mar 2025 · 3 yrs, Bengaluru, Karnataka, India, At Postman, I strengthened both application and cloud security through a blend of hands-on testing, architectural design, and security program development. My focus was on proactive risk reduction and measurable maturity improvements across the organization. • Pentesting & Security Assessments: Led deep-dive penetration tests and red-team style assessments, identifying OWASP Top 10 vulnerabilities, misconfigurations, and supply chain risks across services. • Maturity Scorecards: Designed and rolled out a security maturity scorecard to measure readiness across units, covering vulnerability management, secrets scanning, cloud misconfigurations, and developer adoption of secure practices. • Threat Modeling (STRIDE): Embedded structured threat modeling workshops with engineering teams to address Spoofing, Tampering, Repudiation, Information Disclosure, DoS, and Elevation of Privilege at the design stage. • AWS Cloud Security: Built a secure AWS landing zone, enforcing guardrails with IAM, VPC isolation, encryption, and continuous compliance monitoring. • Governance & Enablement: Created practical security frameworks balancing developer velocity with risk management, ensuring teams could innovate securely without friction.

Lead Product Manager at Postman, Mar 2022 - Jan 2025 · 2 yrs 11 mos, Defined and enforced enterprise-wide IAM SCPs, SSM bastions, and Control Tower guardrails, minimizing lateral movement risks.

Cyber Security Manager at Standard Chartered Bank, Jan 2021 - Apr 2022 · 1 yr 4 mos, Bangalore Urban, Karnataka, India, As a Specialist Cyber Security Consultant at CyberSec Solutions, my primary focus has been on securing cloud infrastructure and containerized environments with an emphasis on Terraform, Docker, and Kubernetes. Leveraging open-source tools such as Checkov, Gitleaks, and Terrascan, I've played a pivotal role in enhancing security postures through proactive scanning, monitoring, and automated response mechanisms.

Education

Post graduate, DevOps Engineering, Simplilearn Alumni

Bachelor of Technology (B.Tech.), Electrical, Electronics and Communications Engineering, jodhpur national university