Headline

Cloud Offensive Security Manager @ IBM ISDL | CCSK | CCEP | CRTP | IBM DevSecOps Speciality | eJPT | CEH

About

Portfolio : https://sujaygr8.github.io/portfolio/ I am a Cloud Offensive Security Manager at IBM, with over 8+ years of experience in cybersecurity, specializing in red teaming, cloud security, incident response, and offensive security strategy. My career has been shaped by hands‑on technical depth combined with people leadership, enabling me to build high‑performing teams and resilient security programs. Currently, I lead and mentor offensive security professionals, driving red team operations, penetration testing, and threat simulation across cloud environments. I design and implement enterprise‑grade security strategies, policies, and procedures to protect organizational assets, manage cyber risk, and ensure compliance with frameworks and regulations such as SOC 2, GDPR, HIPAA, and PCI DSS. I work closely with engineering, IT, and business leaders to integrate security seamlessly into cloud development lifecycles and promote a strong culture of accountability and security awareness. Previously, as a Red Team Penetration Tester, I conducted full‑stack security testing and advanced red team exercises across IBM Public Cloud offerings. My work involved deep research into attacker techniques, tooling, and methodologies, thorough documentation of findings and proof‑of‑concepts, and collaborating with stakeholders to translate vulnerabilities into actionable mitigation plans. Earlier in my career, I supported IBM’s Cloud Trust & Safety initiatives, handling real‑world cyber incidents including malware, intrusion attempts, DDoS, phishing, zero‑day vulnerabilities, and abuse investigations. I also partnered with global security organizations and intelligence agencies to protect cloud infrastructure, IP reputation, and customer trust. I bring strong experience in cloud platforms, incident management, vendor coordination, security operations improvement, and technical documentation, along with a solid foundation from my work as a SAP Cloud Consultant supporting large‑scale PaaS environments. I am passionate about offensive security, cloud security engineering, mentoring teams, and continuously evolving defenses by thinking like an attacker. I thrive at the intersection of technology, leadership, and problem‑solving—where security enables innovation rather than slowing it down.

Location

Bengaluru

Work experience

Cloud Offensive Security Manager at IBM, Jul 2019 - Present · 7 yrs, Bengaluru, Karnataka, India, As the Offensive Security Manager, I lead a team of cybersecurity professionals, providing guidance, training, and performance feedback. I develop and implement cybersecurity strategies, policies, and procedures to protect the organization’s assets, manage and mitigate risks, and ensure compliance with regulations such as SOC2, GDPR, HIPAA, and PCI DSS. I oversee incident response efforts, enhance employee engagement, and promote security awareness. My role involves evaluating and managing security tools, preparing technical documentation, and communicating with internal stakeholders. Additionally, I manage vendor partnerships and continuously improve security operations. I collaborate with IT and business units to integrate security into cloud development processes, fostering a culture of security and accountability.

Red Team - Penetration Tester at IBM, Jul 2021 - Jul 2024 · 3 yrs 1 mo, Bangalore, -Develop a deep technical understanding of IBM Public Cloud offerings and infrastructure. - Plan and perform red team exercises against various cloud offerings. - Plan and perform full stack security tests against various system(s) and application(s) independently as well as within a team. - Engage in security monitoring and visibility improvement activities across the IBM Public Cloud organisation. - Thoroughly document techniques, tactics, and proof of concepts used during security testing and red team exercises. - Communicate with various business and technology leaders to interpret identified vulnerabilities and assist in the development and planning for risk mitigation plans. - Research and continuously improve skills in attacker tools, methods, and techniques. Lead by example for the greater red team in professionalism, communication, and technical expertise.

Cloud Trust & Safety Analyst at IBM, Jul 2019 - Jun 2021 · 2 yrs, Bengaluru Area, India, -As IBM’s Cloud Trust & Safety Analyst am authorized to enforce the Acceptable Use Policy by addressing actionable inbound reports and taking appropriate and timely action to remediate and resolve cybersecurity-based incidents through open communication with our clients and application of administrative action to disable live threats. -As a part of the global IBM cloud security team, I am involved in protecting IBM cloud’s IP space reputation, network infrastructure and brand. -Being a part of CISO am focused on handling various attacks: Malware, Intrusion, DDoS, Zero-Day vulnerabilities, SPAM, LDAP attacks, Phishing, DNS amplification attack, etc. -Analysing various security threats. -Handling security issues with different organization like Cloudflare, Netcraft, SPAMHAUS and other government intelligence agencies. -Handling cyber-attacks related to VPC. - Prepare/review/modify existing and new processes for the global security team. - Handling escalations for different security teams. - Auditing customers account for violation of AUP/TOS of the network and remediating the underlying compromise with suggestions and recommendations.

SAP Cloud Consultant at SAP Labs India, Aug 2018 - Jun 2019 · 11 mos, Whitefield, Bangalore, -I belonged to the SAP cloud engineering global team and actively monitored PAAS level incidents for various data centres. -Hands-on working with Jenkins, Cloud Foundry, Grafana, Kafka, Dynatrace, JIRA etc. Well versed in maintaining SLA. Strong expertise in database operations like SAP HANA, Sybase DB, PostgreSQL. Performing checks on AWS cloud platform. (S3, IAM, EC2). - Proven expertise in VM’s, clusters and hypervisors management. Managed escalations from different cloud platforms team in resolving platform related issues and involving in bridge call to meet up the SLA. - Reporting of platform issues on weekly basis and analysing the root cause of the issue.--

Education

Bachelor of Engineering, Computer Science, Visvesvaraya Technological University