Ananya Kasiraj - Information Security Analyst - Syncron

Summary

Security analyst with a research-driven focus on AI security, risk modeling, and secure system design. Experienced in translating regulatory frameworks and threat models into practical security controls across cloud and AI-enabled systems.

Overview

1

year of professional experience

1

Certification

Work History

Information Security Analyst

Syncron

Bangalore

01.2025 - Current

Conduct structured security control analysis and compliance validation aligned with ISO/IEC 27001 and SOC 2, examining consistency across policies, technical controls, and operational practices within a cloud-based software platform.
Design and execute AI security threat modelling using the NIST AI Risk Management Framework and CSA AI Controls Matrix (AICM) to assess risks across data pipelines, model lifecycles, and deployment environments.
Participate in Secure Software Development Lifecycle (SSDLC) activities, evaluating architectural security considerations, and identifying potential control gaps in AI-enabled application workflows.
Perform third-party and supplier risk assessments, mapping vendor security postures against internal requirements and regulatory expectations, with emphasis on AI-related services.
Collaborate with engineering, data science, and MLOps teams to construct data flow diagrams (DFDs), analyse trust boundaries and data movement, and support remediation planning aligned with security objectives.
Contribute to the development and refinement of governance artefacts, including security policies, SOPs, and internal guidance documents.

Education

B.tech - Computer science, Cbersecurity

Dayananda Sagar University

Bangalore, India

Skills

Security Domains:

AI Security & Governance
Threat Modeling & Risk Assessment
Applied Cryptography (Foundational)
Privacy & Secure System Design
Identity & Access Management

Technical Tools:

Python (Security Scripting)
Cloud Security Fundamentals (AWS)
Data Flow Diagramming
Excel (SOC analysis tool)
Tanium

Publications

Quantum-Safe Protocols Design for IoT Communications: Critical Observation and Analysis, IEEE, Co-authored research focused on Quantum Cryptography and secure communication.

Projects

SSH Honeypot (Python): Designed and deployed a custom SSH honeypot to simulate attacker interactions and log credential brute-force attempts for defensive threat analysis in a controlled lab environment.
Automated Recon & Risk Framework: Developed a modular Python reconnaissance tool integrating Nmap-based service detection and exposure risk scoring to generate structured security assessment reports.