Cloud Security Engineer | AWS | Azure | DevSecOps
📍 southfield, Michigan USA 48076
Cloud Security Engineer with 3+ years of experience securing Azure-based financial workloads through identity governance, network security, vulnerability management, and continuous compliance. Proficient in Microsoft Sentinel, KQL, Qualys, and Defender for Cloud for threat detection, incident response, and posture optimization.
AIG, USA
Jun 2025 — Present
Engineered AWS-native security architecture using IAM, SCPs, Security Hub, GuardDuty, and Config to enforce least-privilege access and continuous compliance, reducing high-risk misconfigurations by 38%. Automated cloud security controls with Python and Terraform in CI/CD pipelines, cutting manual review effort by 45%. Hardened Docker workloads, lowering critical container CVEs by 50%. Implemented real-time threat monitoring on Linux-based EC2 improving MTTD by 35%. Orchestrated centralized log ingestion into SIEM increasing alert accuracy by 40%. Achieved 99% CIS benchmark adherence in quarterly security assessments.
Boost FinCrop Group, India
Jul 2021 — Jul 2023
Deployed Azure Security Center and Azure Policy eliminating 32% of subscription-level compliance gaps. Configured WAF and NSGs blocking 95%+ of OWASP Top 10 attacks. Administered RBAC and Conditional Access with Azure AD, decreasing excessive access exposure by 41%. Integrated Qualys and Defender for Cloud resolving 1,200+ findings within SLA. Created KQL-based detection rules in Microsoft Sentinel shortening MTTR by 33%. Secured Azure SQL and storage with encryption at rest and in transit achieving 100% coverage.
Master · Computer Science
2023 – 2025