Pawan Chauhan
Palwal,Haryana
Summary
Cloud security engineer with 5+ years of experience in Cloudflare WAF, AWS, and Azure security. Manage WAF rule sets, rate limiting, IP and URI controls, and traffic analysis. Perform TLS/SSL reviews, vulnerability mitigation, and security incident investigations using SIEM/SOC workflows. Coordinate remediation across security and application teams to reduce risk and improve posture.
Overview
2
2
Languages
6
6
years of professional experience
Work History
Lead Software Engineer
Persistent Systems
Bengalore
04.2026 - Current
- Supported Cloudflare WAF security operations, including managed and custom rules, IP controls, URI blocking, and rate limiting.
- Monitored and applied Log4j protection controls across critical application domains before enforcement.
- Investigated WAF security events and suspicious traffic, partnering with SOC and SIEM teams for validation and remediation.
- Mapped applications to domains, reviewing Cloudflare inventory to identify WAF coverage and security gaps for enhanced protection.
- Checked TLS/SSL WAF rules and security settings, ensuring robust domain-level controls across Cloudflare zones.
- Processed security changes through ServiceNow change management, including planning, approvals, validation, and documentation.
- Analyzed traffic patterns and false positives, tuning WAF rules to strengthen security policies.
- Worked with SOC, application, infrastructure, and security teams on incident investigation and issue resolution.
- Maintained SOPs, security trackers, implementation plans, and operational reports for Cloudflare security activities.
Infrastructure Security Engineer
Ttf Technologies
09.2025 - 11.2025
- Performed comprehensive security reviews and risk assessments across multiple AWS accounts, leveraging industry best practices and AWS security reference architectures to strengthen organizational security posture by reducing vulnerabilities by 40%.
- Developed and maintained custom findings mute page using Prowler (CSPM), streamlining suppression of non-actionable or false-positive security alerts across all AWS accounts, enhancing operational efficiency by 35% and alleviating alert fatigue.
- Reviewed and investigated Amazon GuardDuty findings organization-wide, remediating or suppressing threats to ensure high-priority issues were resolved within 24 hours, maintaining compliance standards with 99% uptime.
- Implemented centralized, repeatable security assessment workflows using automation with Prowler and integration with AWS Organizations, enabling seamless cross-account visibility and reporting that cut assessment time by 50%.
- Coordinated multi-account security reviews, identifying misconfigurations and enforcing least privilege while collaborating across teams to remediate issues, resulting in a 45% reduction in organizational risk exposure.
- (3 months Contract)
B2 Consultant
Capgemini India
02.2025 - 03.2025
- Facilitated creation and rollout of secure control policies in AWS Organizations and Azure Policy, aligning cloud settings with security standards and regulatory requirements.
- Evaluated security architecture to strengthen cloud security frameworks and identify control gaps.
- Worked with engineering teams to build secure cloud infrastructure, including VPC settings and IAM policies.
- Optimized AWS security services, including GuardDuty, Security Hub, and Inspector, alongside Azure tools like Microsoft Sentinel and Microsoft Defender for Cloud, enhancing overall cloud security posture.
Support Escalation Engineer
Persistent Systems
02.2024 - 11.2024
- Led AWS Airflow DAGs for 99.9% data pipeline uptime; resolved issues 40% faster via proactive monitoring.
- Managed AWS Security Hub, mitigating 95% of high-severity threats within SLAs.
- Performed cloud monitoring/incident response, remediated 85% of vulnerabilities/compliance gaps on first pass.
- Deployed AWS CloudTrail/AWS Config, Azure Monitor/Azure Security Center, boosting visibility/threat detection by 60%.
- Configured AWS CloudWatch alarms, cutting infrastructure troubleshooting time by 50%.
- Conducted AWS Inspector assessments, remediating 90% of vulnerabilities to enhance security posture.
- Investigated AWS GuardDuty findings, neutralizing 98% of threats.
- Optimized DNS/traffic routing, reducing latency by 35%, enhancing network performance and security.
- Configured AWS WAF/Azure WAF/Cloudflare WAF with custom rules, blocking 99% of OWASP Top 10 threats and 85% of DDoS/bot attacks, strengthening overall security posture.
- Integrated WAF with CloudFront/Front Door; monitored via CloudWatch/Monitor/SIEM, improving detection by 40%.
- Deployed AWS Network Firewall/Azure Firewall with IDS/IPS (Suricata/ Snort/GuardDuty/Azure Defender), preventing 95% of lateral movement/malicious activity.
- Automated IDS/SIEM/SOAR workflows (Splunk/Sentinel/Cortex XSOAR), increasing incident response speed by 70% and achieving 60% attack surface reduction while ensuring compliance with CIS/PCI DSS/NIST 800-53.
Network Cloud Engineer
Q-click Service Pvt. Ltd.
01.2021 - 02.2024
- Designed and managed cloud networking/security frameworks across AWS and Azure multi-account environments by creating secure VPC/VNET architectures and access controls; this ensured 99.9% uptime for production workloads while maintaining full compliance with GDPR, SOC 2, and internal audits through regular security reviews.
- Deployed real-time monitoring using AWS CloudWatch dashboards, alarms, and metrics for production workloads across multiple accounts; improved security visibility by 40% (faster threat detection) and system performance by identifying bottlenecks before they impacted users.
- Provisioned and configured core Azure resources including resource groups, VNets, subnets, NSGs, NAT gateways, Key Vault, disk-encrypted VMs, load balancers, and application gateways; optimized setup for regional needs, achieving 25% reduction in cloud costs through rightsizing and reserved instances.
- Deployed and secured Windows Server/IIS applications in Azure, embedding firewall rules and IPS policies into IaC templates (Terraform for Azure, CloudFormation for AWS); ensured automated security deployment across dev/staging/production environments, eliminating manual configuration errors.
- Led incident investigations from IDS/IPS alerts (GuardDuty, Prowler scans), performing root cause analysis and correlating logs across tools; reduced false positives by 35% and mitigated 95% of high-severity findings within SLAs, enhancing overall vulnerability detection.
Education
B.Tech. - Computer Science
Lingayas Institute of Technology and Management
Skills
- Cloudflare WAF and application security
- WAF rule management
- AWS and Azure security
- CSPM and Prowler
- AWS Security Hub and GuardDuty
- Inspector and Azure Defender for Cloud
- Vulnerability management
- SIEM and incident response
- Rate limiting and TLS/SSL
- IAM and VPC management
- NSG and Azure firewall configuration
- CloudWatch and CloudTrail monitoring
- Azure Monitor integration
- ServiceNow and Jira management
- Change management strategies
Personal Information
Date of Birth: 1996-05-09
INTERNSHIP
Woxa Technologies Pvt. Ltd., Project: Facebook Application Development, Skills: Web Development, PHP
TRAININGS
- Azure Cloud Network & Security Training
- AWS Network and Security Training
PERSONAL DETAILS
Languages: English & Hindi
Languages
English
Proficient (C2)
C2
Hindi
Native
Native
Timeline
Lead Software Engineer
Persistent Systems
04.2026 - Current
Infrastructure Security Engineer
Ttf Technologies
09.2025 - 11.2025
B2 Consultant
Capgemini India
02.2025 - 03.2025
Support Escalation Engineer
Persistent Systems
02.2024 - 11.2024
Network Cloud Engineer
Q-click Service Pvt. Ltd.
01.2021 - 02.2024
B.Tech. - Computer Science
Lingayas Institute of Technology and Management