Summary
Overview
Work History
Education
Skills
Certification
Accomplishments
Awards
Training
Timeline
Generic

Priyadarshni Ganesan

Chennai

Summary

Experienced Information Security Professional with a decade of expertise spanning Security Engineering, Security Operations, Cloud, Network Security, Infrastructure, and Endpoint Security. Proficient in Information Security Policies, adept at orchestrating Security Incident Response Management, and safeguarding organizations against multifaceted cyber threats. Skilled in establishing and guiding customer-centric, innovative Information Security teams across diverse scales.

Overview

12
12
years of professional experience
1
1
Certification

Work History

Manager - Information Security

Hubino Technologies
Chennai
07.2021 - Current
  • Led the Security Engineering, Incident Response and Threat Detection across enterprise, multi-cloud environment AWS, GCP for Hubino and its global clients Air Canada, GE, Alstom, Schneider)
  • Architected the Cloud Migration strategy for Hubino Tech, built an end-to-end event correlation and detection platform to proactively generate security alerts to determine adversarial activity / intrusion attempts
  • Drive Business revenue of $10M USD across the Security Function of Hubino to support engineering and operations for a diverse range of client requirements from initial engagement, onboarding, maintenance and securing applications to achieve monitoring and observability
  • Protect customer data, implement regulation and compliance frameworks to achieve regulatory standards for Fintech and Technology companies through PCI DSS, SOC1, SOC2 and NIST
  • Security Incident Manager for Hubino supporting 15 Global clients, responsible for handling product security engagements, vulnerability assessments, data lake ingestion strategy to proactively detect and mitigate security threats
  • Experience/Understanding in working with Cloud Security architecture, DevSecOps integrated processes for code deployments, network and data security architecture using RBAC and ABAC for the AWS/Azure platform
  • Mentor junior analysts, provide oversight and guidance during security engagements, architecture discussions and incident response investigations.

Senior Information Security Engineer

Hubino Technologies AIR CANADA
Chennai
06.2019 - 06.2021
  • Led the architecture and cloud migration strategy for Air Canada Infrastructure to gain 100% visibility / coverage to detect unauthorized activity across Air Canada's ecosystem
  • Migrate 75% legacy on-premise systems to AWS, support cloud migration, implement monitoring and detection strategy and enable cross-functional teams across GE
  • Act as Security Incident Commander to run Sev2 / Sev3 Security Incidents during the migration phase leading to less downtime and impact to Air Canada user experience
  • Participate and engage in CLevel meetings and direct interaction with the technology teams to have a deeper insight of the current threat landscape towards the infrastructure and designed the Security Guidelines SOPs) to mitigate the infrastructure from diverse threats
  • Build metrics around MTTR and MTTD Security Incidents to help leadership navigate the migration changes and act as a technical SME from Hubino during the multi cloud migration.

Application Security Engineer

Hubino Technologies GENERAL ELECTRIC
Chennai
02.2017 - 04.2019
  • Key contributor to Hubino's Application Security Program to enhance code quality and identify security bugs as part of SSDLC
  • Conduct vulnerability assessment and penetration testing for Hubino's key offerings / services
  • Monitoring of security events received through alerts from SIEM or other security tools to detect anomalous behavior across enterprise and client systems
  • Performing Level 2/Level3 triage of incoming security incidents/events, assessing the priority of the events, identify traces of exploitation to determine risk and likelihood of compromise
  • Initiate the Incident management process, followed by root cause analysis of critical security incidents and deployment of custom detection rules to ensure a promising solution for mitigation of attacks
  • Partner and liaise with development teams from client / cross company teams to integrate security as part of the software development lifecycle
  • Vulnerability and security assessment of internal GE applications, reporting of security findings and work with product development teams to mitigate risk and implement security bug fixes.

Programmer Analyst

Cognizant Technology Solutions Lexis Nexis
Chennai
06.2012 - 01.2017
  • Led C# development and secure integration of existing and new product features for multiple client products / ecosystem
  • Identity lifecycle management services and automation
  • Build and maintain scripts and automation that support the Information Security Team to achieve faster triage and remediation
  • Perform code optimization and secure code review of production builds to ensure efficiency and run time complexity
  • Leverage vulnerability assessment tools to identify security issues across production development code and secrets scanning to identify threats across source code repositories
  • Evaluate, integrate and maintain SAST, DAST, SCA, and similar tooling in combination with developing vulnerability management processes and procedures
  • Ensure secure code development through continuous input validation technique and identify opportunities for process automation
  • Partner with Information Security Teams to lead efforts focused on secure code build practices and methodologies
  • Managed relationships with Product Development Teams to ensure security is integrated earlier in the Product Development Lifecycle
  • Engage as security champion across cross-functional teams to drive secure coding boot camps and practices across the developer community.

Education

Master of Science - Information Technology

College of Engineering Guindy - Anna University
Chennai
04.2012

Skills

  • Incident Response Threat Detection
  • Cloud Security AWS GCP
  • Security Operations
  • Security Engineering PCI DSS
  • Threat Hunting Threat Intelligence
  • Threat Modeling C# Net Agile
  • Decision Making Unix SAST
  • SSDLC Compliance
  • Incident Management Risk
  • Leadership Goal Setting
  • Strategy Planning Strategy Execution
  • Mentorship
  • C#
  • Python
  • SQL

Certification

  • ISC2 Certified in Cybersecurity

Accomplishments

  • Building and Leading Teams for startup ecosystem - Built the security team from the ground up to handle diverse range of security requirements both in-house and customer environment.
  • Multi Cloud Security Architect - Designed Lift and Shift Cloud migration strategy to transform how Security Logging and Monitoring is done. Gained 100% visibility and coverage across crown jewels.
  • Security Enablement and Empathy - Trained 30 Software Engineers towards secure coding, thereby driving SSDLC at Hubino and its global clients
  • Consistent Key Player - Top performer in Hubino consistently for the past 3 years, drive the execution and strategy for security and development teams to collaborate based on project requirements
  • Web3 Transformation - Driven security engagements and technical decisions focused on Web3 Technologies

Awards

  • Game changer 2022 Air Canada - Client of Hubino Technologies
  • CEO Awards 2021 Hubino Technologies
  • Best Performer of the Quarter - May 2019 Hubino Technologies
  • Game Changer Award 2018 General Electric - Client of Hubino Technologies

Training

Hubino'sHubino'sCLevelGiduguLaxmiVijayaRamasamySatheesFintech

  • AWS Solution Architect
  • AWS Security
  • Building Secure Applications at Scale - Hubino Technologies
  • Critical Security Incident Response Hubino Technologies
  • Security Engagement and Threat Modeling Overview Hubino Technologies
  • Leadership Communication and Strategy Hubino Technologies

Timeline

Manager - Information Security

Hubino Technologies
07.2021 - Current

Senior Information Security Engineer

Hubino Technologies AIR CANADA
06.2019 - 06.2021

Application Security Engineer

Hubino Technologies GENERAL ELECTRIC
02.2017 - 04.2019

Programmer Analyst

Cognizant Technology Solutions Lexis Nexis
06.2012 - 01.2017

Master of Science - Information Technology

College of Engineering Guindy - Anna University
Priyadarshni Ganesan