Shashank Kulkarni

Competitive rotational program across 6 Information Security teams (DLP & Insider Risk, SOC, Threat Intelligence, OT Security, Vulnerability Management, Security Awareness) supporting enterprise security operations. Throughout the internship, I identified automation opportunities and developed AI-driven proof-of-concepts that demonstrated innovation potential, leading to my selection for a newly created Security Automation and AI role. ➤ FOUNDATIONAL SECURITY EXPERIENCE: Supported DLP/Insider Risk monitoring, SOC alert triage and SIEM correlation, threat intelligence production, OT security assessments, vulnerability management workflows, and security awareness campaigns Participated in incident response exercises, identifying automation opportunities across all security functions ➤ AI & AUTOMATION INNOVATION (Projects that led to FTE hire): GenAI SOC Assistant - Built AI assistant POC for SIEM query creation, optimization, and explanation - reducing SME dependency and providing 24×7 analyst guidance - evolved into production platform in FTE role OT Minimum Security Baseline with AI Control Mapping - Developed OT-focused security baseline and implemented AI-enabled control mapping to improve speed and consistency, demonstrating AI's potential to accelerate security processes Security Metrics Stack with AI Enhancement - Contributed to leadership dashboards with AI-driven enrichment and correlation to reduce false positives and improve analytical accuracy ➤ SECURITY AWARENESS & THREAT INTELLIGENCE: Phishing Olympics - Designed enterprise-wide phishing simulation with gamification (leaderboards, badges, Hall of Fame) - transitioned into ongoing FTE program Iranian APT Threat Briefing - Delivered ATT&CK-mapped threat intelligence briefing, assessed control gaps and CVE exposure, provided hardening recommendations

ISSA is the community of choice for international cybersecurity professionals dedicated to advancing individual growth, managing technology risk and protecting critical information and infrastructure. The Information Systems Security Association (ISSA) ® is a not-for-profit, international organization of information security professionals and practitioners. It provides educational forums, publications, and peer interaction opportunities that enhance the knowledge, skill, and professional growth of its members.

As a Tutor for CSEC-471 (Penetration Testing Frameworks & Methodologies) and CSCI-462 (Introduction to Cryptography), I provided one-on-one mentorship to students, guiding them through hands-on experiences in cybersecurity. In CSEC-471, I helped students navigate the process of penetration testing, from contract negotiation to vulnerability assessment, using real-world tools and methodologies. In CSCI-462, I assisted students in understanding the mathematical foundations of cryptography, and exploring key systems like DES, AES, and RSA. My focus was on mentoring and inspiring future cybersecurity professionals, helping them build a strong foundation in both penetration testing and cryptography.

Designed and implemented a scalable AWS cloud application for AT&T, processing 20M daily spam messages while adhering to best practices for IAM roles, security groups, and encryption at rest to ensure data security. Successfully migrated legacy infrastructure, data, and applications to secure cloud environments, enhancing efficiency and cost-effectiveness while implementing encrypted AMIs for secure deployments. Upgraded and deployed product infrastructure, ensuring seamless transitions, minimal downtime, and compliance with security standards. Built, maintained, and scaled cloud infrastructure to support applications utilized by 2.2B subscribers worldwide, with stringent network security configurations and continuous monitoring. Automated SMS traffic workflows using shell scripts, reducing manual workload by 20% and improving team productivity while safeguarding sensitive information with secure logging and access controls.

• Conducted research to identify and mitigate potential data breaches. • Conducted passive footprinting exercises to identify vulnerabilities and provide recommendations to secure IT infrastructure, resulting in improved security posture and risk mitigation. • Collaborated with cross-functional teams to identify potential security risks and implement proactive measures, resulting in a 30% reduction in security incidents and enhanced protection of confidential data.

• Developed automated tests for the company's web application, successfully covering 70% of the most used functionalities. • Added several service layers for the reporting functionalities of the core platform, demonstrating a quick understanding of microservices architecture. • Produced notable contributions to the core backend services, including customer data handling and KPI identification. • Facilitated onboarding of new interns and received great testimonials from customers for contributed features. • Proficient in Node.js, integrated multiple frameworks and packages to implement new functions and fix critical field issues.

• Created User Interface templates using Figma to enhance the visual appeal of the application. • Conducted user experience analysis and provided valuable insights to the team on how to improve the application's usability and functionality. • Collaborated with the team to refine the user interface and ensure a seamless user experience.

• Introduction to Computing Security • Cryptography and Authentication • Covert Communications • Network Security • Computer System Security • Information Security and Risk Management • Human Factors in Security and Privacy • Social Engineering • Information Security, Policy and Law • Enterprise Security