Headline

Top 2% in Tryhackme |Everything Security @GreatLearning |Help in building apps more secure| ex IEEE Volunteer

About

Security Operations Engineer with 6+ years of experience securing and operating cloud platforms on AWS. Beyond core security responsibilities, have hands-on experience running ECS/Docker workloads in produc- tion, building CloudWatch observability stacks, driving infrastructure cost optimization (30% AWS spend reduction), and owning incident response for critical systems. Seeking to transition into Site Reliability Engineering, combining deep security expertise with proven infrastructure and reliability skills. Two-time Extra Mile Award recipient for operational excellence

Location

Bengaluru

AI stack

claude code

claude

codex

glama

notebooklm

Work experience

Lead Secops Engineer at Great Learning, May 2025 - Present · 1 yr 7 mos, Bengaluru, Karnataka, India, 🔐 Cloud & Security Initiatives: • Maintained ISO 27001 compliance through disaster recovery drills, user access reviews, and audit support. • Improved security posture with IAM policy reviews, WAF rule optimization, and SAST remediation. • Integrated cloud misconfiguration detection (CSPM) into CI/CD to catch and fix critical issues early. • Collaborated with cloud security experts to implement advanced threat detection and runtime monitoring. ☁️ Infrastructure Modernization & Optimization: • Upgraded major databases to supported versions and migrated workloads to ARM-based compute, reducing costs by ~5% and improving performance by ~10%. • Benchmarked and evaluated managed database alternatives to inform future migrations. • Improved scalability and latency (~20–30% gains) by modernizing the core application stack and autoscaling logic. 🛠 Automation & IaC: • Migrated key environments to Infrastructure as Code, enabling consistent, auditable deployments. • Built scalable CI/CD pipelines and automated Jenkins and container infrastructure from scratch. • Reduced container startup times and improved resource utilization through advanced container optimization. ⚙️ Operational Leadership: • Delivered regular patching, monitoring, and upgrades for core infrastructure components. • Actively contributed to deployment reliability, incident resolution, and platform hardening. Continuing to drive secure, scalable, and cost-effective cloud infrastructure.

Senior Security Operation Engineer at Great Learning, Apr 2022 - May 2025 · 3 yrs 2 mos, On-site, Key ● Helped in Reducing the AWS bill by 30% ● Security implementation from the ground up. ● Implemented AWS WAF on the Cloudfront and ALB with all the required rules. ● Infrastructure as Code using AWS CDK for Disaster Recovery and Multi-Environment Setup. ● Performing vulnerability assessments and penetration testing on Web, API, Network, and AWS Cloud Services like EC2 Instances, Elastic Load Balancer, Lambda, and others. ● Help to create and maintain information security policies, documentation, best practices, and standards. ● Develop and improve automated security testing to execute Black/Grey Box Testing using Burp suite, Harvester, Sqlmap etc. ● Introducing Incident Response and Alerting on AWS Cloud using Guard Duty, CloudWatch, CloudTrail and AWS Config. ● Implemented best practices solution from security hub which includes AWS Foundational Security Best Practices v1.0.0 and latest CIS AWS Benchmark v1.4.0 currently 1.2.0 on AWS Security Hub. ● Automated many of the processes using AWS Lambda for example exporting different Log group data from Cloudwatch to S3 for holding more data at low cost for the compliance purpose. ● Review and secure AWS Cloud using Firewall Manager, Trusted Advisor, Inspector, Security Hub, OpenSearch, Kinesis, Lambda and so on. ● Ensure Infrastructure level security compliances including Workstations, Laptops, Mobile, Email, Domain etc. ● Implemented IAM policies and permission boundaries as per the requirement in the secured mannered. ● Worked on the Implementation and POC of the XDR solutions like Palo Alto Cortex and Crowdstrike Falcon XDR. ● Implemented required security policies and infrastructure level changes to achieve ISO27001:2013 certification. ● Helped in scaling the application ● Helped in doing DDoS prevention ● Understanding and Rewriting New Docker Images

Security Engineer at Great Learning, Feb 2021 - May 2022 · 1 yr 4 mos, Bengaluru, Karnataka, India, Key Responsibilities - Perform in-depth security assessment and source code review of applications to identify security issues and risks -Performing Phishing Simulation and managing training for all the employees in the company. - Present the identified security vulnerabilities to the stakeholders and ensure risk is addressed - Continuous research on the latest security controls, business logic flaws, and various test cases - Assist the team in driving assessment activities (e.g follow-ups, escalations management reporting, etc.) - Helping in monitoring and implementation of WAF key Responsibilities in the Product team - Teach students penetration testing. - Create and review content cybersecurity program at great learning. - Troubleshoot the penetration testing problems of the students. - I even do the evaluation of the cybersecurity reports submitted by the students.

Education Program Assistant at IEEE, Oct 2020 - Apr 2021 · 7 mos, key Responsibilities -I did research, write and publish content for the TryEngineering.org website. - Reviewed TryEngineering Lesson Plans and develops new content Analyze TryEngineering.org metrics using Google Analytics. - Support the development of a new Volunteer section of TryEngineering.org - Support the TryEngineering Summer Institute (TESI) curriculum development

Penetration tester Intern at Enciphers, Aug 2018 - Sep 2018 · 2 mos, - I worked as a Penetration tester for the company. - Helped find bugs. - Wrote blogs about different aspects of security. - Create lab's for the training

Education

Bachelor of Technology - BTech, Computer Science, Maharaja Surajmal Institute Of Technology

Diploma, Computer Software Engineering, Government Polytechnic College Mohali (khunimajra)

Public links

github: https://github.com/mafiaguy

medium: https://medium.com/@mafiaguy

mafiaguy.github.io: https://mafiaguy.github.io/