🔐 About Me
I'm a passionate DevSecOps Engineer and Application Security Specialist based in Bengaluru, India, with a focus on secure SDLC, threat modeling, and security automation across cloud-native environments.
🎓 Graduated from Vellore Institute of Technology (VIT), Chennai in Electronics and Communication Engineering, and currently working at ZEE Entertainment Enterprises Ltd on embedding security within DevOps.
- DevSecOps Transformation | Cloud Security Engineering
- Application Security (AppSec): DAST, SAST, SCA, secret scanning, threat modeling
- Container & Kubernetes Security: Runtime security, image scanning, RBAC, CIS benchmarking
- CI/CD Pipeline Hardening: GitHub Actions, CircleCI, Jenkins, GitLab
- Infrastructure as Code (IaC) Security: Terraform, Helm, Kubernetes manifests
- Security Automation: Python & Bash scripting, YAML-based pipeline automation
- SBOM & Compliance: License checks, GHAS, IriusRisk, tfsec
- OWASP ZAP, Burp Suite Pro
- SonarCloud, Semgrep, Snyk
- Dependabot, CodeQL, GHAS
- 🔐 GCP Cloud Security and GKE Policy Enforcement
- 📊 Governance, Risk & Compliance (GRC)
- Certified Kubernetes Security(CKS) - In Progess
- Google Cloud Professional Cloud Security Enginner - In Progess
- ☁️ Advanced threat modeling & SOC integrations
- 📧 [email protected]
- 📂 GitHub
- 🔐 DevSecOps Pipeline – SAST, DAST, Secrets Scanning, Trivy, Image Tagging, and CD to GKE
- 🧪 OWASP Top 10 Audit – For enterprise web/mobile apps with ZAP + Burp + custom Python scripts
- ☁️ GCP Security Hardening – Google SCC, audit logs, compliance dashboards
👉 View Resume (PDF)
📬 Or email me

