Naveen Sonti

• A highly motivated software engineer with expertise in building secure infrastructures on the Google Cloud Platform (GCP) and AWS.
• Possessing 1.11 years of experience in developing backend applications.
• Hands-on experience and proficiency in Python programming.
• Proficient in Python scripting for automating tasks, including Excel sheet manipulation.
• Skilled in developing Python code to enforce rules for GCP infrastructure scans and promptly identify cloud-related violations.
• Knowledgeable in implementing security-compliant checks and scans for various application and infrastructure security modules, such as SAST, DAST, Cloud Infrastructure, Container Security, and WAF.
• Experience with DevOps tools like Git, Jenkins, and AWS CodePipeline.
• Expertise in using CLI tools for cloud platforms like AWS and GCP.
• Familiarity with software containerization platforms like Docker and container orchestration tools like Kubernetes.
• Knowledge of various cloud-native computing aspects, including databases, storage, security, and monitoring services.
• Actively involved in the creation and maintenance of GCP infrastructure.
• Proficient in using Python within popular IDEs like Sublime Text and Visual Studio Code.
• Dedicated to delivering secure, efficient, and scalable solutions for thriving cloud applications.

• Work Experience:
• Software Developer
• Company: KRISH COMPUSOFT SERVICES, Hyderabad
• Duration: Nov 2021 - Jan 2023

• Trainee Software Engineer
• Company: VEDAMS SOFTWARE SOLUTIONS INDIA PRIVATE LIMITED, Hyderabad
• Duration: May 2021 - Oct 2021

Project Details:

Project 3: SunPower

• Description: Implemented end-to-end solutions for application/infrastructure deployment, monitoring, and security using DevOps and cloud/application security practices.
• Responsibilities: Remediated vulnerabilities across AWS/GCP services, coordinated with EY auditors for SOX compliance, and ensured SOX compliance for applications.

Project 2: OSS (Open Source Scanner)

• Description: A cloud security application for securing Google Cloud Platform projects with GCP best practices.
• Responsibilities: Developed custom Python rules, created custom violations, conducted GCP infrastructure scans, packaged Python applications, and implemented new functionalities.

Project 1: Biarca Patrol

• Description: A cloud security and compliance monitoring application for GCP projects, addressing security, governance, and compliance challenges.
• Responsibilities: Developed custom Python rules, performed GCP infrastructure scans using the Biarca Patrol UI and managed violations for misconfigured resources.