Vasu Maradiya profile photo 1 on Tal

Vasu Maradiya

Senior Consultant at Deloitte USI | DevSecOps | Cloud Security | Application Security

Pune District

9+ years of work experience

Deloitte
May 20242 yrs 1 moPresent

Hybrid

-Integrating security measures into the CI/CD pipeline to ensure code is scanned and secure at every stage of development. -Automating security processes to minimize manual oversight and to streamline security protocols within the development lifecycle. -Conducting regular security audits and risk assessments to identify vulnerabilities and compliance issues within applications and infrastructure. -Developing and enforcing security best practices and policies among the development team to promote a culture of security awareness. -Collaborating with development and operations teams to ensure security considerations are included in the software design and deployment strategies. -Configuring and managing security tools such as static and dynamic code analyzers, vulnerability scanners, and container security solutions. -Responding to and investigating security incidents and breaches, and participating in post-mortem analysis to prevent future occurrences. -Creating and maintaining documentation related to security procedures, configurations, and incident response plans. -Training and mentoring team members on security tools, best practices, and emerging threats. -Working with compliance officers to ensure that the organization meets regulatory requirements and industry standards for security. -Monitoring security metrics and KPIs to track the effectiveness of security measures and to report on security posture to stakeholders. -Staying up-to-date with the latest security technologies, trends, and threats to continuously improve the security infrastructure.
Deloitte
Jul 20221 yr 11 mosMay 2024

Pune, Maharashtra, India

-Spearheaded the seamless integration of security measures into the CI/CD pipeline, resulting in a notable reduction of vulnerabilities by a substantial margin and a significant enhancement of threat detection capabilities. -Assumed leadership in conducting comprehensive security training sessions for both development and operations teams, fostering a pervasive culture of heightened security awareness throughout the organization. -Collaborated closely with cross-functional teams to successfully implement stringent security controls, thereby ensuring strict adherence to industry standards, including but not limited to NIST and ISO 27001. -Spearheaded the implementation of best practices in DevSecOps, which led to a remarkable reduction in incident response times and a notable overall enhancement of security measures. -Pioneered the development of automated security tests and scans, enabling the early detection of vulnerabilities within the code during the development phase. -Proficiently managed security assessments and audits, which yielded a remarkable improvement in compliance scores, further reinforcing our commitment to security. -Played a pivotal role in the inception and maturation of the DevSecOps program, which resulted in a significant decrease in security incidents across the organization. -Successfully implemented robust container security solutions, including Docker and Kubernetes, effectively mitigating risks associated with containerized applications. -Collaborated seamlessly with the incident response team to develop comprehensive incident response plans and conduct rigorous tabletop exercises, ensuring the organization's readiness to respond to security incidents effectively.
Infosys
Dec 20201 yr 8 mosJul 2022

Pune, Maharashtra, India

- Automated Service Monitoring with Security Integration Develop a Shell-based automation solution to monitor the data replication service on Azure VMs. Incorporate security checks (e.g., verifying service integrity, detecting unauthorized changes) and send email alerts for failures or anomalies. - Self-Healing with Secure Observability Create a self-healing Shell solution integrated with AppDynamics to automatically remediate issues with Elastic and Logstash services on Azure VMs. Include security validation steps (e.g., ensuring patched versions, verifying SSL configurations) during recovery. - Secure VM Provisioning for Stress Testing Implement Shell automation for provisioning Azure VMs for stress testing prior to customer onboarding, embedding security hardening scripts (e.g., disabling unused ports, enforcing encryption) during VM creation. - Continuous Integration with Security Gates Architect a CI pipeline in Azure DevOps to build the automation application and execute automated tests. Integrate security gates such as static code analysis (SAST), secret scanning, and dependency vulnerability checks before merging. - Security-Enhanced Observability Dashboards Design AppDynamics dashboards to monitor daily VM operation failures and infrastructure utilization, including security metrics (e.g., failed authentication attempts, abnormal traffic patterns) for proactive threat detection.
Infosys
Dec 20201 yr 8 mosJul 2022

Orchestrated shift-left security integration into CI/CD pipelines, increasing early vulnerability detection rates by 45%. Designed security-as-code frameworks for multiple client delivery teams, aligning pipelines with NIST & ISO 27001 standards. Developed automated SAST, DAST, and IaC scanning workflows, reducing remediation timelines by 30%. Enhanced container security by integrating Kubernetes and Docker scanning tools into production workflows.
SteepGraph
Aug 20173 yrs 5 mosDec 2020

Pune, Maharashtra, India

- Integrate Agile and Secure Development Practices Apply Agile methodology within Azure DevOps to manage user stories and resolve bugs as per the Sprint plan, ensuring that security requirements (e.g., threat modeling, secure coding standards) are incorporated into each iteration. - Automate Secure Troubleshooting for Cloud Infrastructure Implement automated remediation scripts and security checks for cloud-related issues such as quota exhaustion, infrastructure failures, and misconfigurations. Include compliance validation and vulnerability scanning in troubleshooting workflows. - Proactive Security Monitoring with Kibana Develop Kibana dashboards and alerts that not only monitor application and infrastructure exceptions but also trigger automated security responses (e.g., isolating compromised nodes, alerting SOC teams) to mitigate potential threats. - Secure Continuous Delivery Pipeline Architect a CD pipeline in Azure DevOps that integrates security gates (e.g., container image scanning, dependency vulnerability checks) before deploying Docker images to non-production and production environments. Ensure secrets management and RBAC are enforced. - Secure Data Extraction via Kubernetes Jobs Design Kubernetes jobs for scheduled Oracle database data extraction with encryption in transit and at rest, implementing least-privilege access controls and auditing for compliance.

Vasu’s AI Stack

cursor
cursor
github copilot
github copilot
ollama
ollama
openai
openai

Education

RK University

Bachelor of Technology (B.Tech.), Computer Engineering

RK University

20134 yrs2017

Join Vasu and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Vasu Maradiya on Tal

Headline

Senior Consultant at Deloitte USI | DevSecOps | Cloud Security | Application Security

About

🔒 DevSecOps Specialist | Cloud & Security Automation | CI/CD Architect I’m a DevSecOps professional with 8 years of experience seamlessly integrating security into DevOps pipelines to enhance organizational security, speed, and compliance. I specialize in building secure, scalable CI/CD processes that align development, operations, and security teams — enabling faster delivery with reduced risk. 💡 Core Expertise: Cloud Platforms: Azure (IaaS, PaaS), Azure DevOps, AWS CI/CD Pipelines: Jenkins, Maven, GitHub, automated security testing Containerization & Orchestration: Docker, Kubernetes Infrastructure & Monitoring: Red Hat Enterprise Linux, ELK Stack Project Tools: JIRA, HP ALM 🛡️ Security Tooling & Practices: SAST: Fortify, Veracode, CodeQL SCA: Snyk, Trivy, OWASP Dependency-Check Container Image Scanning: Trivy, Snyk Container, Aqua DAST: HP AppScan, Checkmarx I'm passionate about embedding security at every stage of the development lifecycle, ensuring secure, compliant, and high-performance software delivery in agile environments. I thrive in roles that challenge me to innovate and make a meaningful impact.

Location

Pune District

AI stack

cursor

github copilot

ollama

openai

Work experience

Senior Consultant at Deloitte, May 2024 - Present · 2 yrs 1 mo, Hybrid, -Integrating security measures into the CI/CD pipeline to ensure code is scanned and secure at every stage of development. -Automating security processes to minimize manual oversight and to streamline security protocols within the development lifecycle. -Conducting regular security audits and risk assessments to identify vulnerabilities and compliance issues within applications and infrastructure. -Developing and enforcing security best practices and policies among the development team to promote a culture of security awareness. -Collaborating with development and operations teams to ensure security considerations are included in the software design and deployment strategies. -Configuring and managing security tools such as static and dynamic code analyzers, vulnerability scanners, and container security solutions. -Responding to and investigating security incidents and breaches, and participating in post-mortem analysis to prevent future occurrences. -Creating and maintaining documentation related to security procedures, configurations, and incident response plans. -Training and mentoring team members on security tools, best practices, and emerging threats. -Working with compliance officers to ensure that the organization meets regulatory requirements and industry standards for security. -Monitoring security metrics and KPIs to track the effectiveness of security measures and to report on security posture to stakeholders. -Staying up-to-date with the latest security technologies, trends, and threats to continuously improve the security infrastructure.

Consultant at Deloitte, Jul 2022 - May 2024 · 1 yr 11 mos, Pune, Maharashtra, India, -Spearheaded the seamless integration of security measures into the CI/CD pipeline, resulting in a notable reduction of vulnerabilities by a substantial margin and a significant enhancement of threat detection capabilities. -Assumed leadership in conducting comprehensive security training sessions for both development and operations teams, fostering a pervasive culture of heightened security awareness throughout the organization. -Collaborated closely with cross-functional teams to successfully implement stringent security controls, thereby ensuring strict adherence to industry standards, including but not limited to NIST and ISO 27001. -Spearheaded the implementation of best practices in DevSecOps, which led to a remarkable reduction in incident response times and a notable overall enhancement of security measures. -Pioneered the development of automated security tests and scans, enabling the early detection of vulnerabilities within the code during the development phase. -Proficiently managed security assessments and audits, which yielded a remarkable improvement in compliance scores, further reinforcing our commitment to security. -Played a pivotal role in the inception and maturation of the DevSecOps program, which resulted in a significant decrease in security incidents across the organization. -Successfully implemented robust container security solutions, including Docker and Kubernetes, effectively mitigating risks associated with containerized applications. -Collaborated seamlessly with the incident response team to develop comprehensive incident response plans and conduct rigorous tabletop exercises, ensuring the organization's readiness to respond to security incidents effectively.

Senior Associate Consultant at Infosys, Dec 2020 - Jul 2022 · 1 yr 8 mos, Pune, Maharashtra, India, - Automated Service Monitoring with Security Integration Develop a Shell-based automation solution to monitor the data replication service on Azure VMs. Incorporate security checks (e.g., verifying service integrity, detecting unauthorized changes) and send email alerts for failures or anomalies. - Self-Healing with Secure Observability Create a self-healing Shell solution integrated with AppDynamics to automatically remediate issues with Elastic and Logstash services on Azure VMs. Include security validation steps (e.g., ensuring patched versions, verifying SSL configurations) during recovery. - Secure VM Provisioning for Stress Testing Implement Shell automation for provisioning Azure VMs for stress testing prior to customer onboarding, embedding security hardening scripts (e.g., disabling unused ports, enforcing encryption) during VM creation. - Continuous Integration with Security Gates Architect a CI pipeline in Azure DevOps to build the automation application and execute automated tests. Integrate security gates such as static code analysis (SAST), secret scanning, and dependency vulnerability checks before merging. - Security-Enhanced Observability Dashboards Design AppDynamics dashboards to monitor daily VM operation failures and infrastructure utilization, including security metrics (e.g., failed authentication attempts, abnormal traffic patterns) for proactive threat detection.

Consultant at Infosys, Dec 2020 - Jul 2022 · 1 yr 8 mos, Orchestrated shift-left security integration into CI/CD pipelines, increasing early vulnerability detection rates by 45%. Designed security-as-code frameworks for multiple client delivery teams, aligning pipelines with NIST & ISO 27001 standards. Developed automated SAST, DAST, and IaC scanning workflows, reducing remediation timelines by 30%. Enhanced container security by integrating Kubernetes and Docker scanning tools into production workflows.

DevSecOps Consultant at SteepGraph, Aug 2017 - Dec 2020 · 3 yrs 5 mos, Pune, Maharashtra, India, - Integrate Agile and Secure Development Practices Apply Agile methodology within Azure DevOps to manage user stories and resolve bugs as per the Sprint plan, ensuring that security requirements (e.g., threat modeling, secure coding standards) are incorporated into each iteration. - Automate Secure Troubleshooting for Cloud Infrastructure Implement automated remediation scripts and security checks for cloud-related issues such as quota exhaustion, infrastructure failures, and misconfigurations. Include compliance validation and vulnerability scanning in troubleshooting workflows. - Proactive Security Monitoring with Kibana Develop Kibana dashboards and alerts that not only monitor application and infrastructure exceptions but also trigger automated security responses (e.g., isolating compromised nodes, alerting SOC teams) to mitigate potential threats. - Secure Continuous Delivery Pipeline Architect a CD pipeline in Azure DevOps that integrates security gates (e.g., container image scanning, dependency vulnerability checks) before deploying Docker images to non-production and production environments. Ensure secrets management and RBAC are enforced. - Secure Data Extraction via Kubernetes Jobs Design Kubernetes jobs for scheduled Oracle database data extraction with encryption in transit and at rest, implementing least-privilege access controls and auditing for compliance.

Education

Bachelor of Technology (B.Tech.), Computer Engineering, RK University