Anshuman Kumar
Security Lead
Gurgaon
Summary
Security Architect with 8+ years of experience in Insider Threat & Risk Management, DLP, and Data Protection. Proven expertise in building insider threat monitoring programs (DLP + SIEM + UEBA), conducting risk assessments, leading incident investigations, and driving awareness across technical and non-technical teams.
Strong compliance background (ISO 27001, PCI DSS, GDPR, OCC, BCBS239) and a track record of reducing insider and data security risks through automation, governance dashboards, and executive-level reporting. Adept at working with cross-functional stakeholders (Legal, HR, IT, Compliance) to balance prevention and response
Overview
2
2
Certifications
9
9
years of professional experience
Work History
Security Lead
Infosys Consulting Inc.
04.2025 - 08.2025
- Spearheading strategic security initiatives for global clients, strengthening overall cyber resilience, and risk posture across cloud and on-premise environments.
- Designed high-level design and elaborated with a data flow diagram.
- Collaborated with global teams to design and implement security solutions, ensuring compliance with company security regulations, and improving overall security posture by 40%.
- Partnered with senior stakeholders to design security-by-design frameworks, reducing architecture review timelines by 30%.
Security Architect
Comviva
03.2024 - 04.2025
- Designed and deployed a comprehensive security monitoring system using Grafana and Prometheus tools, enabling real-time threat detection and reducing mean time to detect (MTTD) incidents by 35%.
- Integrated threat modeling based on STRIDE to identify all the risks and threats.
- Conducted security awareness & insider threat training for 200+ developers on OWASP Top 10 (Web, API, Cloud) vulnerabilities
- Implemented data encryption in transit and at rest using AES, RSA, and TLS/SSL protocols, along with secure key management.
- Integrated secure coding standards & SAST/DAST/SCA tools (Fortfiy, J Frog,Acunetix) into the CI/CD pipeline, reducing remediation efforts by 40%.
- Performed enterprise penetration tests using BurpSuite & Tenable, closing 100+ critical insider exploitable vulnerabilities, strengthening audit compliance.
Cyber Security Manager
TruBoard Partners
02.2022 - 02.2024
- Led investigations into insider-related incidents, coordinating with HR and Legal to ensure privacy and regulatory compliance.
- Built and managed a DLP & Insider Threat monitoring program using Symantec DLP and Wazuh SIEM, reducing insider data leakage risk by 40%..
- Designed insider risk dashboards for executive reporting, aligning with ISO 27001, PCI DSS, and GDPR compliance mandates..
- Automated UEBA-style anomaly detection with Wazuh log analysis, cutting detection time by 35% (MTTD)
- Strengthened hybrid-cloud security using Azure Security Center and open-source SIEM integrations.
- Reduced phishing-driven data leakage incidents by 40% through targeted awareness programs.
Information Security Analyst
Indialends
01.2018 - 02.2022
- Rolled out the Symantec DLP solution across 2,000+ endpoints, ensuring the protection of PII and financial data.
- Developed and enforced data detection policies, preventing unauthorized sharing of sensitive information over email and cloud storage.
- Monitored and investigated DLP alerts to prevent data leakage and insider misuse.
- Collaborated with audit teams to ensure PCI-DSS and ISO 27001 compliance through DLP reporting.
- Strengthened IAM practices across AWS, Azure, and Microsoft 365, reducing unauthorized access attempts by 25%.
Technical Support
Balj Technology
01.2017 - 12.2017
- Provided secure infrastructure support, troubleshooting, and reducing ticket resolution time by 20%.
- Provided comprehensive technical support for troubleshooting device issues and resolving customer concerns.
- Boosted client retention by consistently delivering exceptional Tier 2 technical support services.
Education
B.Tech - Computer Science Engineering
IIMT College of Engineering
Greater Noida, India06-2017
Skills
Insider Threat Management (DLP, UEBA)
DLP Policy Design & Enforcement (Data in Use, Motion, Rest)
Security Monitoring & Insider Threat Response
Application Security (SAST, DAST, API Security, OWASP Top 10)
Threat Modeling (STRIDE), Secure SDLC, DevSecOps
SIEM & Threat Detection (Wazuh, Suricata, Snort)
Certification
ISO 27001 Auditor – The Knowledge Academy
Timeline
Security Lead
Infosys Consulting Inc.
04.2025 - 08.2025
Security Architect
Comviva
03.2024 - 04.2025
Cyber Security Manager
TruBoard Partners
02.2022 - 02.2024
Information Security Analyst
Indialends
01.2018 - 02.2022
Technical Support
Balj Technology
01.2017 - 12.2017
B.Tech - Computer Science Engineering
IIMT College of Engineering