Chinmay Tiwari

• Led enterprise-wide initiatives to enhance security posture, overseeing vulnerability management, threat detection, and incident response across cloud and on-premises environments. • Managed and prioritized remediation efforts for critical and high-severity vulnerabilities, significantly reducing risk exposure and improving SLA adherence among engineering teams. • Developed and enforced secure configuration standards-including IAM policies, firewall rules, TLS protocols, and logging practices-aligned with NIST and CIS frameworks. • Directed penetration testing processes, improving coverage of exploit scenarios, increasing detection accuracy, and streamlining remediation workflows. • Collaborated cross-functionally with DevOps, engineering, and security teams to accelerate the vulnerability resolution lifecycle by approximately 35%.

• Conducted in-depth reviews of penetration testing, phishing simulation, and continuous monitoring reports, identifying critical security gaps and delivering actionable remediation plans that reduced exposure across applications and infrastructure. • Developed and validated technical fixes for discovered vulnerabilities, including secure code snippets, configuration hardening (IAM, firewall rules, TLS, logging), and system-level controls aligned with security best practices. • Analyzed penetration testing methodologies, tools, and attack coverage, recommending strategic enhancements that improved test depth, exploit accuracy, and overall assessment effectiveness. • Partnered with engineering and DevOps teams to prioritize and track vulnerability remediation, reducing open high-severity findings and improving security SLA compliance. • Assisted in executing phishing simulations and user risk assessments, analyzing click-through metrics and supporting awareness initiatives that strengthened organizational security posture.

• Conducted end-to-end security assessments for Java- and Python-based web applications using OWASP ZAP and Burp Suite, identifying and remediating critical vulnerabilities that reduced breach exposure by 60%. • Integrated DevSecOps pipelines in Jenkins and GitLab CI by automating static and dynamic scans using SonarQube, Snyk, and Fortify, accelerating secure release cycles by 30% across 12+ product teams. • Architected a secure multi-tenant cloud deployment for a SaaS platform on AWS, implementing IAM roles, WAF, and KMS encryption, which achieved ISO 27001 compliance and enhanced client trust. • Performed penetration testing and source code reviews for mobile apps built in React Native and Node.js, uncovering insecure data storage and unvalidated input paths, which were patched pre-launch.