Pruthviraj Rajaram Ghatge

Dynamic Technical Staff Professional with specialized expertise in API Security, Professional Services, and Managed Security Services. Proven track record in onboarding enterprise clients, delivering end-to-end API inventory discovery, and orchestrating comprehensive threat protection. Experienced in deploying Dynamic Application Security Testing (DAST), enforcing Web Application Firewall (WAF) strategies, and safeguarding complex business logic against sophisticated threat actors. Skilled at bridging client success with advanced technical execution across India and Middle East markets.

• Client Onboarding & Lifecycle Management: Lead end-to-end technical onboarding and managed services for enterprise clients across international markets, resolving complex API security incidents and maintaining high customer satisfaction metrics.
• API Discovery & Inventory Management: Oversee automated API inventory discovery workflows, providing actionable visibility into unknown, rogue, and shadow APIs while educating client security teams on continuous attack surface mapping.
• DAST & Vulnerability Assessment: Execute both Active and Passive Dynamic Application Security Testing (DAST) to proactively identify, validate, and remediate high-severity API vulnerabilities prior to deployment.
• Runtime Protection & Defense Enforcement: Configure and fine-tune runtime defense mechanisms, including WAF Shield, OpenAPI Schema Shield, and Business Logic Protection, to block unauthorized access and prevent API abuse.
• Advanced Threat Protection (ATP): Deploy automated threat detection profiles to identify, track, and mitigate malicious threat actors attempting business logic exploitation, credential stuffing, and account takeovers.
• Cross-Functional Collaboration: Partner with engineering and product teams to translate recurring customer security challenges into automated detection logic, API Gateway integrations, and product enhancements.

Core Competencies & Key Technical Keywords

• API Security & Protection: API Discovery & Inventory, DAST (Active & Passive Scanning), OpenAPI/Swagger Schema Enforcement, Business Logic Protection, WAF Shielding, Threat Actor Mitigation.
• Managed & Professional Services: Client Onboarding, Technical Account Management, Incident Response, Customer Technical Support, SLA Adherence, Security Consulting.
• Technologies & Platforms: RESTful APIs, JSON/YAML Specs, API Gateways (Kong, NGINX), MicroK8s/Kubernetes, Docker, Automated Threat Detection (ATD).

• Spearheaded end-to-end Zscaler deployments as a Professional Services Consultant, including tenant onboarding, policy configuration, and secure traffic redirection through ZIA, ZPA, ZDX, and ZCC.
• Well versed in Zero Trust architecture, user/application segmentation, and identity provider integration (e.g.}. SAML/AD and SSL inspection strategies.
• Performed troubleshooting and root cause analysis using ZDX for application performance monitoring, digital experience scoring, and real-time diagnostics across endpoints, networks, and cloud environments.
• Supported ongoing Zscaler operations as a Managed Services Consultant, providing policy updates, configuration changes, incident support, and optimisation recommendations based on telemetry data.
• Configured and fine-tuned Zscaler security policies, web application firewall rules, custom URL categories, bandwidth control, and DLP profiles to align with business and compliance requirements.
• Led traffic rollout strategies, including PAC file updates, GRE/IPsec tunnel configuration, Zscaler App (ZCC) deployment, and Zero Trust application publishing via ZPA App Connectors.
• Collaborated with cross-functional teams (IT, Security, Network Ops) to ensure smooth deployment and seamless migration from legacy proxy/firewall solutions to Zscaler cloud-based security architecture.
• Maintained up-to-date documentation, KB articles, and operational SOPs to support ongoing Zscaler environments, and improve the internal knowledge base.

Technologies used: ZIA, ZPA, ZDX, ZCC, DLP, Endpoint DLP, Browser Isolation, ZTE, SAML, GRE/IPsec, PAC files, IDP Integration, SSL Inspection, Policy Enforcement.

Technical Assistance Center – APAC | Zscaler Cloud Security Platform
Awarded GCS Quarterly Award – TAC APAC, Nov 2023

• Delivered advanced technical support to global enterprise customers for Zscaler's cloud-native security solutions including ZIA (Zscaler Internet Access), ZDX (Zscaler Digital Experience), Cloud IDS/IPS, Cloud Firewall, Secure Web Gateway, and Cloud DLP.
• Specialized in Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) architectures to ensure seamless, secure connectivity for end-users.
• Resolved complex network and security incidents by analyzing traffic behavior using tools such as Wireshark, TCPdump, Fiddler, Zscaler Analyzer, WinMTR etc
• Troubleshot and optimized performance issues related to GRE/IPSec tunnels, DTLS/TLS tunnel, firewall policies, datacenter latency, and VPN reachability.
• Supported deployment, configuration, and migration of Zscaler solutions including NSS (Nanolog Streaming Service), and SIEM integrations.
• Analyzed customer data and logs using internal tools like LOGAN and JUMP server for deep-dive diagnostics.
• Collaborated with cross-functional teams including engineering and product management to deliver timely and effective resolutions for customer escalations.

Key Skills:
Cloud Security | Network Security | SIEM | ZIA | ZPA | ZDX | NSS | VZEN/PZEN | TCP/IP | TLS/DTLS | Wireshark | Secure Web Gateway | Zero Trust | SASE | SWG

• System Administrator and Application Admin
• FOSS Integration
• Technical support

• Experience in maintenance of software, Hardware( server, workstations, UPS, Printers).
• Handling Classes viz., subjects related to Computer Science.
• Software licensing, Maintain security of the network using a firewall. Installation of DHCP,DNS protocols. VLAN Configurations. Resolving the issues of IP Conflict, IP Management, assigning static and dynamic IP. File sharing, Both local and Network Printer configuration & installation. Video Conferencing & content sharing using polycom, SKYPE,Google Meet, Lifesize.
• Creating groups for Client Server management and to access files in a better way. Maintaining all CIPET: CSTS, Mysuru network. OS installation, Lost Data recovery, Server configuration. Solving hardware issues for workstation.

• Teaching subjects like computer networks, network security, Cybersecurity, Web Designing