Mahesh Sambarathi

Senior Security Engineer @ Wells Fargo

About

Senior Cybersecurity Engineer with 4+ years of experience securing large-scale enterprise and financial environments across SOC operations, SIEM engineering, vulnerability management, cloud security, network security, and Zero Trust architecture. Proven expertise in threat detection, SIEM tuning, and MITRE ATT&CK-aligned threat hunting, with a strong track record of reducing false positives, improving MTTR, and expanding detection coverage. Hands-on experience driving risk-based vulnerability remediation using Tenable, Wiz, Qualys, and cloud-native tools, resulting in measurable reductions in critical exposure and SLA breaches. Strong background in AWS, Azure, and GCP security, IAM (Azure AD/Entra ID, Okta), CSPM/CNAPP, MFA, and least-privilege access controls. Experienced in incident response, malware analysis, digital forensics, and GRC compliance (PCI DSS, ISO 27001, SOC 2). Passionate about automation and scaling security operations using Python, PowerShell, Bash, SOAR, and ServiceNow to eliminate manual effort and improve operational efficiency. Open to senior cybersecurity, SOC, cloud security, and vulnerability management roles

Country

United States

City

Irving

Industry

Computer & Network Security

Skill

Information Technology Infrastructure, Network Security Implementation, Retail, Statistical Data Analysis, Traffic Management, Automatic Control, Industrial Automation, Electric Vehicles, Fast charging techniques, Power Electronics, Circuit Design, Network Topology, Renewable Energy Systems, Nmap, Zemap, Packet Tracer, Electronics, Electricity, Security Implementation, Microsoft Power BI

Experience

Senior Security Engineer

Wells Fargo

2024-5 - Present · 2 yrs 5 mos

Lead enterprise vulnerability management using Tenable.io, Nessus, and Wiz, reducing critical (CVSS ≥9) exposure by 38% within 90 days Implement risk-based remediation workflows aligned to business criticality, improving SLA compliance from 82% to 97% Tune SIEM detections in Splunk and Microsoft Sentinel, reducing false positives by 32% Build executive-level dashboards providing real-time SOC metrics, MTTR, and threat trends Conduct MITRE ATT&CK–aligned threat hunting across endpoint, network, and cloud telemetry, improving detection coverage by 25% Lead incident triage for phishing, malware, and credential-based attacks, reducing containment time by 30% Strengthen cloud security posture across AWS and Azure using GuardDuty, CloudTrail, Security Hub, Azure Defender, and Wiz Enforce Zero Trust principles (MFA, least privilege), reducing privileged access risk by 28% Support PCI DSS, ISO 27001, and SOC 2 audits with zero high-severity findings Automate SOC and vulnerability workflows using Python, PowerShell, Bash, ServiceNow, and Jira

Cyber Security Engineer

Capgemini

2022-1 - 2023-8 · 1 yr 8 mos

Mumbai

Monitored 24x7 SOC operations using QRadar, Sentinel, and Splunk, triaging 2,000+ alerts/day Engineered SIEM correlation rules mapped to MITRE ATT&CK, improving detection accuracy Automated SOAR playbooks, reducing MTTR by 30% Performed vulnerability scanning with Qualys and Nessus, reducing critical findings by 35% Implemented Zero Trust access using Zscaler ZIA & ZPA, reducing remote-access risk by 40% Managed and optimized firewall policies (Palo Alto, Cisco ASA, Check Point, Fortinet) Integrated firewall and proxy logs into SIEM for end-to-end visibility

SOC Analyst

IBM

2021-5 - 2022-1 · 9 mos

India

Triaged and escalated security incidents across 10,000+ endpoints Automated Sentinel SOAR playbooks, reducing MTTR by 30% Conducted malware analysis, digital forensics, and phishing investigations Tuned EDR tools (CrowdStrike, Carbon Black, Defender) to reduce false positives by 25% Supported SOC 2 and PCI DSS audits and compliance reporting