Security Engineer

12/2021 – offen

Dell Technologies – Bangalore, India
• Key advocate in bridging security practices with organizational business needs for Security & Privacy Governance, Risk Management, and Compliance (GRC).
• Applied industry frameworks including ISO/IEC 27001 and the NIST Cybersecurity Framework to strengthen security governance of Information Security Management Systems (ISMS) and improve Key Performance Indicators (KPIs).
• Performed threat modeling using the STRIDE framework to identify threats and mitigate Key Risk Indicators (KRIs). Managed vulnerability management programs, conducting regular scans, analysis, and remediation tracking.
• Security Champion in leading Secure Architecture review with global development teams, architects, and product owners to integrate security policies across the Secure Software Development Lifecycle (SDLC) for Dell Private Cloud.
• Conducted risk assessments by evaluating threat likelihood and business impact. Improved security processes by establishing repeatable and scalable application security practices (SAST, DAST, SCA), threat modeling and risk management.

Certified Information Security Manager