Headline

InfoSec Engineer | Application Security, DevSecOps and Cloud Security | Vulnerability Management | Microsoft Sentinel

About

I’m a security engineer with 7 years of experience across security operations, application security, cloud security and automation. I started in SOC investigations and moved into work that helps teams find, understand and fix security issues earlier. I work hands-on with web and API testing, vulnerability management, CI/CD security checks, cloud monitoring and detection engineering. I like tracing a finding to its cause, working with the team responsible for the fix, and checking that the issue is resolved. Core areas of focus: • Application & API Security: Testing authentication, authorization and application behavior; validating findings and retesting fixes. • DevSecOps: Working with SAST, DAST, SCA and container scanning, and building security feedback into development workflows. • Cloud Security: Investigating cloud activity, reviewing security findings and supporting remediation across Azure, AWS and GCP environments. • Detection & Automation: Building and tuning Microsoft Sentinel detections, log integrations and security workflows. Technologies: Burp Suite Pro, Astra, OWASP ZAP, Semgrep, Trivy, Microsoft Sentinel, KQL, Azure Logic Apps, Azure DevOps, Bitbucket, Jira, Auth0, Entra ID, Python and PowerShell.

Location

India

AI stack

claude code

claude

codex

gemini

geminicli

Work experience

InfoSec Engineer at Traydstream, Dec 2023 - Present · 2 yrs 11 mos, Remote, - Investigated web and API security findings beyond the scanner report, including tracing an authentication privilege escalation to a missing entitlement check in code and validating the fix with engineering. - Manage application security findings from testing through remediation and retesting, working with developers to confirm risk, resolve disputed findings and check that fixes work. - Designed and tested a shared CI/CD security scanning workflow that gives developers feedback on new and fixed code and dependency findings during pull requests. - Analyzed dependency scan results to identify the upgrades that would resolve the largest groups of open findings, giving development teams a clearer order for remediation. - Reviewed security headers and browser protections across application and infrastructure layers, separating fixes owned by developers from those owned by the infrastructure team. - Supported software supply chain incident response by checking application dependencies against threat intelligence and documenting a repeatable verification process. - Built and tuned cloud log integrations and detections in Microsoft Sentinel, and investigated excess telemetry to improve monitoring and control ingestion costs. - Automated recurring security work, including application secret expiry tracking and incident workflows, so issues are recorded and routed for action.

Security Engineer L2 at Cognisive, Apr 2022 - Nov 2023 · 1 yr 8 mos, Coimbatore, - Managed vulnerability findings from validation through remediation and retesting, working with the responsible teams to prevent findings from getting lost in the backlog. - Reviewed investigations and guided L1 engineers through incident analysis, helping the team make decisions without escalating every case. - Expanded my cloud security work from AWS into Azure and OCI, supporting investigations and vulnerability management across those environments. - Identified recurring manual work in security operations and helped improve the processes the team used to handle it.

Security Engineer L1 at Cognisive, Aug 2019 - Apr 2022 · 2 yrs 9 mos, Tidel park Coimbatore, - Monitored, triaged and investigated security alerts in the SOC, separating activity that needed a response from benign or expected behavior. - Investigated AWS events using CloudTrail, CloudWatch and GuardDuty, building a grounding in cloud security monitoring and incident response. - Ran vulnerability assessments, validated findings and followed up on remediation with the responsible teams. Developed threat hunting and detection-rule skills while working through day-to-day investigations.

Intern at Cognisive, May 2019 - Aug 2019 · 4 mos, Learned how the SOC operates through alert monitoring, initial triage and documenting investigations for the team.

Education

Bachelor of Science, Information Technology, Dr.G.R.Damodaran College of Science