Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Radhika Tripathi

Gorakhpur,UP

Summary

Dynamic Cloud Security and DevSecOps Specialist with 5 years of experience in designing, implementing, and managing secure cloud infrastructures. Proven expertise in integrating security practices within development pipelines and automating security controls. Adept at identifying vulnerabilities, mitigating risks, and ensuring compliance with industry standards and regulations. Strong background in cloud platforms (AWS, Azure, GCP), CI/CD tools, and security frameworks. Committed to enhancing system resilience and safeguarding critical data through innovative security solutions.

Overview

6
6
years of professional experience
1
1
Certification

Work History

Assistant Manager

KPMG, LLP, Financial Services Assurance
06.2023 - Current

Utilized Dockle and Trivy to conduct thorough security assessments of container images, effectively identifying vulnerabilities, insecure configurations, and other risks that could compromise image security.

Enhanced cloud security by employing Prowler to detect and address misconfigurations, thereby strengthening the overall security posture.

Applied SonarQube for continuous code inspection and analysis, identifying and resolving issues, enforcing coding standards, and ensuring the maintainability of the codebase.

Deployed solutions to monitor best practices across cloud resources, CI/CD pipelines, and Kubernetes environments, and have hands-on experience with source code management and CI/CD tools such as GitHub, Bitbucket, Jenkins, and Artifactory

Assistant Manager

KPMG, LLP, Financial Services Assurance
06.2022 - 05.2023
  • Managed Azure Security Center for continuous monitoring and threat detection, ensuring proactive security measures and real-time alerts.
  • Configured and maintained security controls for Azure Active Directory (AAD) and Identity and Access Management (IAM), safeguarding user access and identity.
  • Performed security assessments on Azure resources to identify vulnerabilities and implement effective mitigation strategies.
  • Implemented Cloud Security Posture Management (CSPM) by integrating AWS and Azure accounts with Prisma Cloud and overseeing CNCP deployment for enhanced security oversight.
  • Led the deployment and management of Prisma Cloud, providing comprehensive security management across cloud environments.
  • Conducted ongoing monitoring and assessment of cloud infrastructure to identify and address security vulnerabilities promptly.
  • Collaborated with cross-functional teams to enforce security policies and ensure adherence to industry standards and regulatory requirements.
  • Configured and optimized Prisma Cloud policies to meet organizational security needs and maintain robust security postures.
  • Delivered training and created documentation for internal teams on best practices and effective use of Prisma Cloud.
  • Participated in incident response by analyzing and addressing security incidents to mitigate risks and enhance security resilience.

Cloud Security Engineer

Accenture
02.2019 - 05.2022
  • Contributed to an internal project focused on overseeing the security of multiple customer cloud accounts across AWS, Azure, and GCP.
  • Assisted with onboarding of multi-cloud accounts (AWS, Azure, GCP) to the Prisma Cloud Platform and provided clients with Cloud Security Posture Management (CSPM) services.
  • Monitored compliance using SaaS products such as Cloud Health and Prisma Cloud to ensure adherence to security policies.
  • Analyzed cloud security events and logs to detect and respond to potential threats and anomalies.
  • Developed and maintained security policies and procedures to safeguard cloud environments.
  • Implemented security controls and technologies to protect cloud infrastructure from threats.
  • Conducted security assessments and vulnerability scans to identify and address potential risks.
  • Researched and recommended security solutions to mitigate identified risks and enhance overall security posture.
  • Provided support for incident response related to cloud security incidents, including analysis and resolution.
  • Implemented and managed security controls for cloud-based systems, resolving technical issues through ServiceNow.
  • Monitored internal servers for various aspects such as billing, data utilization, and cloud consumption.
  • Handled troubleshooting and security integration using Chef, Tanium, and Qualys to protect client environments.
  • Secured cloud accounts by enabling CloudTrail and GuardDuty, and creating necessary CloudFormation templates.
  • Rectified cloud controls including S3 bucket policies, VPC flow logs, invalid IAM policies, Azure RBAC policies, Azure Storage accounts, Azure Key Vault, and Google Cloud expired CloudFront certificates.
  • Deployed and updated policies and rules on Azure via the Azure portal and DevOps, adjusting incoming and outgoing rules on NSGs and firewalls.
  • Implemented Azure SIEM for enhanced security information and event management.

Education

B.Tech - Computer Science And Engineering

Institute of Technology And Management, GIDA
Gorakhpur
08.2018

Skills

    Cloud Security (AWS, Azure)

    Language (KQL, RQL)

    DevSecOps (Docker, Kubernetes, Jenkins, Maven, Terraform, Ansible, SonarQube, Trivy, Prowler, Grafana, Prometheus)

    Vulnerability Management (Qualys and Kenna)

    Incident Response

Certification

SC-900 Microsoft Security, Compliance, and Identity Fundamentals

AZ-900 Microsoft Azure

Fundamental Certified

AZ-500 Microsoft Azure Security Engineer Associate

AWS Solution Architect SAA C02

Palo Alto Network Security Engineer (PSE) : Prisma Cloud Associate

Timeline

Assistant Manager

KPMG, LLP, Financial Services Assurance
06.2023 - Current

Assistant Manager

KPMG, LLP, Financial Services Assurance
06.2022 - 05.2023

Cloud Security Engineer

Accenture
02.2019 - 05.2022

B.Tech - Computer Science And Engineering

Institute of Technology And Management, GIDA

SC-900 Microsoft Security, Compliance, and Identity Fundamentals

AZ-900 Microsoft Azure

Fundamental Certified

AZ-500 Microsoft Azure Security Engineer Associate

AWS Solution Architect SAA C02

Palo Alto Network Security Engineer (PSE) : Prisma Cloud Associate

Radhika Tripathi