Sr. InfoSec Security Engineer |Threat Intelligence | Vulnerability Management | AWS & Azure Cloud Security | Network Security| GRC Compliance

I'm a Senior Security Engineer with over ten years of hands-on experience in cybersecurity, information security, and cloud security across both enterprise and government environments. My expertise spans vulnerability management, secure SDLC, DevSecOps, Zero Trust Architecture, and risk management. I’ve worked extensively with platforms like Microsoft Azure, AWS, and Kubernetes, and am highly proficient in securing both Windows and Linux environments.

I specialize in integrating Privileged Access Management (PAM), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), Managed Detection and Response (MDR), and SIEM technologies to deliver full-spectrum visibility and threat detection. I have strong experience with tools including Wiz, Rapid7, Splunk, TrendMicro Deep Security, Tenable, Burp Suite, and Nmap.

My work includes embedding security controls into CI/CD pipelines, conducting penetration testing, threat hunting, and leading incident response efforts aligned with frameworks such as NIST 800-53, SOC 2 Type 2, and PCI-DSS. I'm currently pursuing CISSP and PenTest+ certifications to further enhance my ability to design, defend, and drive resilient security programs.

I’m passionate about building secure systems by design, leveraging automation and intelligence to stay ahead of threats, and helping organizations align cybersecurity with their business goals.