Vivek S

Senior Cybersecurity Engineer

National Air Carrier Association • Tiempo completo

Dec 2025 - Present • 10 mos

Lead cybersecurity engineers and own application security, cloud security, SOC operations and GRC, setting technical direction and security standards across the organization. Deliver web application and API VAPT using Burp Suite and OWASP ZAP, identify OWASP Top 10 vulnerabilities and drive remediation with engineering teams through to closure. Built the vulnerability management programme end to end, publishing monthly reports and coordinating remediation with IT, development and infrastructure teams through to closure. Established Secure SDLC from the ground up, embedding security gates across design, development, testing and release to integrate security into application delivery. Direct SOC operations across endpoint, identity, email and cloud telemetry, overseeing alert triage, threat detection and incident response. Own third-party risk management and GRC, covering vendor assessments, contractual security requirements, periodic reassessments, security policies and internal audit readiness. Manage email security, including anti-phishing, anti-spam and malware policies, and SPF, DKIM and DMARC enforcement to reduce domain spoofing and business email compromise risk. Manage Azure WAF protection for business applications, defining rules and tuning policies to block malicious traffic while minimizing false positives.

Security Engineer

Noon • Tiempo completo

Dec 2024 - Dec 2025 • 1 yr

• Led CSPM and CNAPP initiatives across Azure, GCP and Huawei Cloud, increasing cloud security posture score from 65% to 82%. • Led Identity Security Posture Management initiatives, increasing identity security posture from 75% to 91%. • Managed ISO 27001 and PCI DSS compliance activities across Azure, GCP and Huawei Cloud platforms. • Managed vulnerability identification, risk assessment and remediation across network, infrastructure, application and cloud environments. • Led deployment and optimization of threat intelligence platforms and Microsoft Defender XDR for threat detection and incident response. • Managed identity, endpoint and email security, alongside exposure management, using Microsoft Defender XDR. • Designed and deployed Azure Policy initiatives mapped to ISO 27001, NIST and SOC 2 controls, integrating Microsoft Defender for Cloud for continuous posture monitoring. • Performed third-party risk assessments and worked with vendors to address PCI DSS, SOC 2 and ISO 27001 compliance requirements.

Cloud Security Engineer

HDFC Bank • Tiempo completo

May 2023 - Oct 2024 • 1 yr 5 mos

• Conducted security architecture reviews for core banking, netbanking and biometric authentication platforms, assessing design, data flows and security controls against regulatory and internal standards. • Conducted ITGC and cloud platform audits across AWS, Azure and GCP against CIS, NIST, PCI DSS and GDPR requirements. • Performed risk assessments and gap analyses across cloud configurations, network security and access management controls, recommending improvements and tracking remediation to closure. • Led third-party and vendor risk assessments, evaluating secure configurations and regulatory compliance. • Used CSPM tools to identify excessive permissions, insecure storage configurations and network vulnerabilities. • Reviewed the Pune Metro digital card application, evaluating authentication, data protection and integration security across the payment and transit ecosystem.