09/10/2025 updated
100 % available
Sr. DevSecOps Engineer with AI/MLSecOps Expertise
Pune, India
Worldwide
Bachelors of EngineeringArtificial IntelligenceAmazon Web ServicesMicrosoft AzureCloud Computing SecurityControl Objectives for Information and Related Technology (COBIT)ComplianceContinuous IntegrationFederal Information Processing Standards (FIPS)Health Insurance Portability and Accountability Act (HIPAA) ComplianceHP Systems Insight ManagerInformation Disclosure StatementInfrastructure ManagementOWASPPrometheusSonarQube
Cloud Security
Expertise in securing cloud environments across AWS, GCP, and Azure platforms using tools like GuardDuty, Shield, WAF, and Detective for comprehensive protection of cloud-native applications and infrastructure.
Container Security
Advanced knowledge in Docker container hardening, vulnerability scanning, and remediation using tools like Sysdig Secure, Aquasec Trivy, and Grype to create secure container environments with minimal vulnerabilities.
DevSecOps Implementation
Proficiency in integrating security throughout the development lifecycle using SAST, SCA, DAST tools including Veracode, Sonarqube, OWASP Zap, and implementing automated security scanning in CI/CD pipelines.
AI/ML Security
Experience in securing AI/ML systems including Large Language Models against threats like data poisoning, information disclosure and prompt injection using tools like NB Defense and Garak.
Infrastructure as Code
Skills in secure infrastructure provisioning using Terraform, with experience in implementing compliant cloud architectures following security frameworks like NIST, FedRAMP and TOGAF.
Compliance & Regulatory Frameworks
Knowledge of implementing security standards including NIST, SANS, CIS Controls, GDPR, COBIT, FedRAMP, FIPs, HIPPA, and MITRE ATT&CK for ensuring regulatory compliance.
Monitoring & Observability
Experience with implementing comprehensive monitoring solutions using TICK Stack (Telegraf, InfluxDB, Chronograf, Kapacitor), Prometheus, Grafana for infrastructure and application monitoring.
Expertise in securing cloud environments across AWS, GCP, and Azure platforms using tools like GuardDuty, Shield, WAF, and Detective for comprehensive protection of cloud-native applications and infrastructure.
Container Security
Advanced knowledge in Docker container hardening, vulnerability scanning, and remediation using tools like Sysdig Secure, Aquasec Trivy, and Grype to create secure container environments with minimal vulnerabilities.
DevSecOps Implementation
Proficiency in integrating security throughout the development lifecycle using SAST, SCA, DAST tools including Veracode, Sonarqube, OWASP Zap, and implementing automated security scanning in CI/CD pipelines.
AI/ML Security
Experience in securing AI/ML systems including Large Language Models against threats like data poisoning, information disclosure and prompt injection using tools like NB Defense and Garak.
Infrastructure as Code
Skills in secure infrastructure provisioning using Terraform, with experience in implementing compliant cloud architectures following security frameworks like NIST, FedRAMP and TOGAF.
Compliance & Regulatory Frameworks
Knowledge of implementing security standards including NIST, SANS, CIS Controls, GDPR, COBIT, FedRAMP, FIPs, HIPPA, and MITRE ATT&CK for ensuring regulatory compliance.
Monitoring & Observability
Experience with implementing comprehensive monitoring solutions using TICK Stack (Telegraf, InfluxDB, Chronograf, Kapacitor), Prometheus, Grafana for infrastructure and application monitoring.
Experience
Professional experience0 - 5 years
Freelancer since2024
Languages
EnglishFluent
Project history
Developed CloudGuardian, a resource and policy discovery agent for major cloud vendors. Created secure open source packages and implemented container hardening programs. Led Docker vulnerability remediation automation and secure infrastructure development lifecycle initiatives.
Integrated security tools in GitLab CI/CD for automating security scans. Implemented FedRAMP, NIS 2.0 & FIPs guidelines for containerized applications. Managed cloud security operations including secure architecture implementation and AWS security services.
Developed microservices for GRC team, configured data flow from ERP applications to data lake. Automated development environments and infrastructure provisioning using Terraform. Implemented monitoring solutions using TICK Stack & Grafana.