Harsha G.

➥ Architected and led comprehensive security architecture reviews and conducted continuous security assessments for AWS cloud-native workloads, embedding security-by-design principles and delivering actionable remediation plans resulting in the identification and remediation of 5 critical vulnerabilities. ➥ Established & led a Security Champions program, delivering secure coding training, mentoring 15+ engineers on secure SDLC, threat modeling & CI/CD best practices that improved security-by-design principles adoption into their daily workflows. ➥ Engineered & operationalized the complete set of SOC 2 controls and implemented continuous compliance monitoring, resulting in zero CRTICAL/HIGH audit findings across two consecutive certification cycles and successfully maintaining the company's SOC 2 certification. Key Achievements: ★ Reduced cloud misconfigurations at OSL Group by architecting and operationalizing AWS-native CSPM controls (Security Hub, Config, Lambda remediation) and automating finding correlation and remediation playbooks, improving policy compliance with CIS/NIST standards by 38%. ★ Improved cyber security defense, attack preparedness, incident response readiness, recovery procedures and contingency plan to achieve SOC 2 Type 2 Security Certification.

➥ Enhanced cloud security posture by engineering & enforcing robust Identity and Access Management (IAM) policies & Role-Based Access Controls (RBAC) across cloud environment, streamlining user access management reducing access-related security incidents by 50%. ➥ Championed & implemented ‘Shift Left’ DevSecOps practices across the SDLC, integrating automated vulnerability detection & security validation directly, significantly reducing security debt & accelerating secure software delivery. ➥ Architected and secured the AWS Kubernetes ecosystem using Infrastructure as Code (IaC), enabling development teams to achieve a 3x faster and more secure deployment frequency. Key Achievements: ★ Automated Kubernetes and container security at Mox Bank by enforcing Pod Security Standards, OPA admission policies, image scanning (Trivy/Snyk), and IaC validation blocking 340 high/critical vulnerabilities pre-production & reducing container drift violations across clusters by 73% in first 6 months. ★ Evangelizing, identified, analyzed, implemented & AWS cost management initiatives to save the organization up to USD 56,000/month as cost savings. ★ Developed Python-based security automation framework integrating PagerDuty, Jira, AWS Lambda, reducing alert triage time from 45 minutes to 12 minutes and automating 85% of security ticket classification at Mox Bank.

➥ Architected and led the organization's end-to-end cybersecurity strategy and architecture, enabling secure digital transformation and achieved full compliance with EU financial regulations. ➥ Proactively manage evolving cybersecurity risks, implementation of processes to detect, mitigate, respond. ➥ Continually building knowledge of best practices regarding cyber security preparedness and awareness techniques while ensuring continuity of service. Key Achievements: ★ Built and deployed containers for implementing microservice architecture from Monolithic Architecture for our applications. Ensured smooth operations of our production systems by configuring the monitoring and alerting tools. ★ Led a secure-by-design Azure migration at Acatus, architecting a robust security framework that enabled the business to achieve €200,000 in cloud cost savings without compromising security posture.

➥ Led initiatives to secure applications and infrastructure in AWS, enabling safer scaling of digital banking platforms. ➥ Led a team focused on securing critical applications and cloud environments, driving innovation in security solutions and resolving complex technical challenges. ➥ Architected and implemented robust security controls for enterprise cloud platforms, successfully passing all internal security audits and preventing high-severity vulnerabilities in production. Key Achievements: ★ Built a cloud security framework which enabled R&D team to use and adapt to the cloud. ★ Participated in JPMC hackathon 2019 and helped an R&D team migrate and create a template for their application migration to the cloud and created a ‘one-click’ cloud deployment model. It became their first ever cloud deployment and provided a pathway for migrating the rest of their applications to the cloud.

➥ Develop and implement policies, standards, guidelines, and procedures regarding areas such as information security, cyber security, disaster recovery, loss and fraud prevention and privacy, emergency and incident responses. ➥ Work with R&D team to configure, deploy, automate cloud-based solutions using AWS cloud infrastructure with scalability, fail-over and security best practices and design patterns. ➥ Investigate, and evaluate new tools and Cybersecurity tools chains focusing on continuous improvement. ➥ Authored and operationalized a comprehensive suite of information security policies and incident response procedures, which enhanced organizational resilience and were adopted across 5 R&D business units. Key Achievements: ★ Engineered and automated scalable, secure cloud-based deployments on AWS, integrating failover and security best practices that reduced manual deployment efforts by 50%. ★ 91,000 USD savings per year beginning with 2016 – The result is based on a survey considering three product teams. UBDD is now being used by more than twenty teams and its reach and money saved is much more than what is estimated in the survey results. ★ Recommended for “Award of Excellence” for my contribution to HomeCare and other product development.

Dissertation titled “ITIAR: Improved Traffic and Infotainment Aware Routing for Vehicular Ad Hoc Networks in City Environments”. Published in the Journal of ICACSIT.