Profile Summary
Professional overview aligned to your resume.
Accomplished IT security professional with comprehensive experience in identifying vulnerabilities, proposing effective security solutions, and improving the security posture of applications and enterprise platforms while leading and managing diverse teams. Passionate about helping organizations achieve strong quality and information security outcomes by managing cyber risk, supporting business objectives, and enabling secure technology transformation.
Area of Expertise
Vulnerability Assessment
Penetration Testing
Web / Mobile / API Security
OWASP / WASC
Source Code Review
Infrastructure Security
Cloud Security
Information & Application Security
Security Architecture
Threat Modelling
Risk Mitigation
Security Policies & Procedures
Team Development & Leadership
Customer Engagement Management
Problem Solving & Decision Making
Project Management & Resource Management
13+
Years of cybersecurity experience
UAE + India
Regional experience across banking and consulting
End-to-End
Experience across design, testing, review, and risk oversight
Career Experience
Manager Cyber and Digital Risk
- Lead cyber risk assessments for new banking technologies and third-party integrations, supporting go-live approvals aligned with enterprise risk appetite.
- Provide independent oversight and challenge to first-line risk-taking activities in line with the Risk Management Framework.
- Identify, assess, and monitor enterprise risks while ensuring adherence to policies, regulatory requirements, and risk appetite.
- Conduct independent risk assessments and gap analyses across operational, financial, compliance, and strategic areas.
- Collaborate with business and first-line teams to improve risk awareness and strengthen controls and remediation actions.
Senior Security Architect
- Designed and implemented security strategies to protect enterprise applications, infrastructure, and sensitive information from evolving threats.
- Conducted in-depth threat modeling that significantly reduced potential Critical, High, and Medium risks.
- Performed threat modeling during design stages to reduce later remediation costs and improve secure design outcomes.
- Presented robust solutions to both technical and non-technical stakeholders while evaluating complex business and technical requirements.
- Improved SSDLC and DevSecOps practices across development phases and guided developers on secure coding and security components.
- Evaluated security requirements during RFP stages and contributed to organization-wide security strategy development.
DevSecOps / Security Architect
- Executed SSDLC and DevSecOps best practices while delivering security architecture guidelines and security requirements to diverse teams.
- Performed static and dynamic reviews of web, mobile, API, and thick-client applications using automated and manual techniques.
- Conducted source code review, threat modeling, design review, penetration testing, and cloud infrastructure security review.
- Integrated SAST, DAST, and third-party scanning into delivery pipelines to reduce release effort and improve security coverage.
- Created reusable technical reporting templates and supported vendor assessment and remediation prioritization.
Senior Cyber Security Consultant
- Delivered major banking security projects involving red teaming, infrastructure security reviews, and application security assessments.
- Managed a team of 10 resources performing security reviews across multiple client engagements.
- Produced technical and executive-level reports with observations, proof of concept, impacts, and recommendations.
- Guided clients on compensating controls where immediate remediation was not feasible before production go-live.
Security Consultant
- Reviewed source code and conducted security assessments of web, mobile, and infrastructure environments.
- Delivered detailed testing reports and coordinated with development teams on remediation throughout engagements.
- Supported onsite overseas projects across Middle East countries to assess application and infrastructure security.
Information Security Analyst
- Performed vulnerability assessments and penetration testing for web, mobile, thick-client, and source code review engagements.
- Managed product-related queries for Checkmarx and GFI Languard.
- Evaluated security configurations of routers, switches, and firewalls to strengthen client security posture.
Awards & Recognition
Awards
- GEM (Going the Extra Mile) Award – Risk Team, 2026
- Annual GEM Sapphire Individual Award – Emirates NBD, 2020
- Employee of the Quarter – Network Intelligence
- Long Standing Award – Network Intelligence
- Certificate of Excellence – Network Intelligence
- Best Agile Supporter Team Award – Emirates NBD
- Best Collaboration Team Award – Emirates NBD
Recognition
- Listed in various bug bounty programs.
- Acknowledged by Oracle Critical Advisory, Microsoft DotNetNuke, and Google.
- Rewarded by Yahoo, PayPal, AT&T, and Nokia.
Education
Bachelor of Engineering in Information Technology (2010)
University of Mumbai, India
Languages
Marathi – Native
Hindi – Fluent
English – Fluent
Contact
Use the form below to get in touch. This version is set up for Netlify Forms, so inquiries can be delivered without showing your email address or mobile number on the website.