Summary
Overview
Work History
Education
Skills
Certification
Accomplishments
Interests
Timeline
Generic
SHAHROOK TAMBOLI

SHAHROOK TAMBOLI

Pune

Summary

Cybersecurity Application Security Analyst | Cloud security Engineer Experienced in Cloud Security, Cybersecurity, Microsoft Azure, AWS, GCP, AI, DevSecOps, Windows, Linux, and IaaS concepts. Currently associated with Deloitte with overall experience of around 7.5 years.

Overview

1
1
Certification
8
8
years of professional experience

Work History

Cloud security engineer

#Deloitte
Pune
11.2025 - Current
  • Conducted comprehensive cloud security assessments across AWS and Azure environments, ensuring compliance with industry standards (ISO 27001, NIST, CIS benchmarks). Understanding and experience of end-to-end security architecture for cloud-native applications and IoT ecosystems covering devices, gateways, APIs, cloud workloads, and data communication channels.
  • Established cloud security reference architectures and security guardrails aligned with Zero Trust principles across AWS, Azure environments. Implemented defense-in-depth strategies across application, network, identity, and data layers to reduce attack surface and improve cyber resilience. Conducted architecture risk assessments and security design reviews for cloud services, microservices, APIs, and connected device platforms.
  • Led vulnerability management initiatives, including identification, prioritization, and remediation of security gaps, reducing risk exposure. Defined secure SDLC standards and architecture patterns for web, API, and microservices environments. Enforced security controls: authentication, authorization, encryption at rest/in transit, and secure session management.
  • Understanding and experience of API gateway controls, JWT validation, rate limiting, schema validation, WAF policies, and secure service-to-service authentication. Implemented secrets management and cryptographic key lifecycle controls using Azure Key Vault, AWS Secrets Manager and cloud-native KMS solutions.
  • Led security architecture reviews for cloud services utilizing Azure Security Center, AWS Security Hub, Defender for Cloud, and cloud compliance frameworks. Implemented centralized security logging, threat detection, monitoring, and incident visibility with SIEM integrations and cloud-native telemetry services.
  • Served as escalation point for Trellix DLP alerts; executed containment and forensic analysis within GCP/AWS workloads to minimize mean time to remediate.
  • Built failover scripts and ran recovery drills to ensure systems met RTO/RPO targets. Resilience metrics tracking: Monitored automation rate, MTTR, tool coverage, and recovery readiness to improve reliability.
  • Collaborated with cross-functional teams to design and enforce secure cloud architectures, minimizing misconfigurations and unauthorized access.
  • Performed regular penetration testing and risk analysis, providing actionable insights to strengthen cloud infrastructure security posture.
  • Developed and maintained security documentation, policies/procedures for compliance and audit.

Application Security Analyst

Qualys
Pune
09.2022 - 10.2025
  • Experience in Infrastructure Security, Cloud security and Vulnerability management.
  • Vulnerability management and scanning detection, Response, Patch, Remediation - Manual testing and ensuring False Positive/Negative vulnerability detection on Web Apps (OWASP TOP 10, SANS).
  • Integrated security gates into CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, and GitLab CI to automate security validation across software releases. Automated security compliance checks and policy enforcement using Infrastructure-as-Code (Terraform, ARM, CloudFormation) and policy-as-code frameworks.
  • Implemented and maintained cybersecurity compliance across multiple frameworks including DISA STIG, NIST, ISO 27001, ensuring alignment with industry best practices and regulatory requirements. Experience with leading security standards such as NIST Cybersecurity Framework, CIS Controls, OWASP Top 10, and PCI-DSS, contributing to robust risk management and secure system architecture
  • Performed security assessments of Generative AI platforms and AI-enabled features to identify risks related to sensitive data exposure, model misuse, and adversarial attacks. Leveraged AI-assisted tooling to accelerate threat modeling, vulnerability triage, code review, security testing, and remediation workflows.
  • Led SAST/DAST/IAST program implementation and tuning to identify code and runtime vulnerabilities early. Established vulnerability triage and SLA-driven remediation workflows; tracked metrics like MTTR and remediation rate. Work experience in Container Security, Api Security and Jenkins.
  • Integrated security into CI/CD pipelines with automated gating, fail-fast policies, and incremental scanning. Automated remediation workflows using issue creation, PRs, and remediation bots to accelerate fixes. Applied policy-as-code (Gatekeeper) for runtime and deployment guardrails. Secured IaC and pipelines with IaC scanning, secrets scanning, and immutable infrastructure practices.
  • Responsible for handling major escalations with Application Security Product Suite and global customers for regions like APAC, EMEA, and AMERICAS. Strong project management skills to drive cloud initiatives, manage timelines, and deliver successful outcomes.
  • Knowledge of regulations (ISO27001, NIST, IEC/ISA 62443). For the Qualys vulnerability and scanning, Automated security gating in Jenkins pipelines.
  • Mentored engineering teams on cloud security architecture, secure coding practices, DevSecOps controls, and AI security governance. Defined enterprise security standards, security patterns, and architecture review processes supporting secure product development.
  • Working with engineering, QA, product, and operations teams to resolve design flaws, bug fixes and improving products. Experience with vulnerability scanning tools, penetration testing methodologies, and patch management processes.
  • Manage security and platform incidents using an enterprise incident management framework.
  • Qualys expertise in VM, Firewall, Container Security, Vulnerability Assessment, Cybersecurity, Bash scripting.
  • Log Management: Splunk, Kibana, Wireshark, Scanner logging & analysis.
  • Technical assistance to queries, issues, and bug handling by sending definitive and updated emails with to-the-point customer meetings.
  • PKI, SSL Management: Qualys CertView, SSL Labs, Cryptography.
  • OSI/TCP-IP Model, Network Security and Protocols.

Cloud Support Engineer

Infogain (Silicus Technologies)
Pune
11.2019 - 09.2022
  • Worked on Microsoft Azure (Public) Cloud to provide IaaS support to client. Create Virtual Machines through Azure Portal and PowerShell.
  • Azure Sentinel: Collecting threats, detection response and investigation, Azure DevSecOps/ cloud security skills and automation for Azure Governance. Ability to set up monitoring tools, analyze security logs, and respond to security incidents promptly.
  • Utilized Microsoft Defender for Cloud and Microsoft Sentinel to monitor, assess, and enhance cloud security posture across Azure environments. Conducted security configuration assessments using Microsoft Cloud Security Benchmark (MCSB), aligning cloud workloads with industry best practices and compliance standards.
  • Experience in Microsoft Azure (Azure Policy, Resource Manager, Governance).
  • Applied Microsoft Cloud Security Benchmark (MCSB) to assess and strengthen cloud infrastructure security across Azure environments, aligning with industry best practices and compliance requirements.
  • Implemented threat detection, vulnerability management, and policy enforcement using Microsoft-native tools, contributing to proactive risk mitigation and incident response readiness
  • Skilled in scripting and automation (Azure CLI, JSON).
  • Hands on experience in Cloud security, Cloud management.
  • Proficiency in managing user identities, permissions, roles, and access controls within cloud environments
  • Microsoft Azure NSG (Network Security Group), Azure Policy, Resource Manager, Governance
  • Proficiency in handling various Tools – Labtech, TrendMicro-Antivirus manager.
  • Configuring Backup Configuration, Azure Update Management and Log Analytics Workspace to patch VMs.
  • Capture an image of Virtual Machine. Attaching Disk to a Virtual Machine. Manage and create Virtual Network in Azure Portal.
  • Working on Patch Management using Microsoft Azure.
  • Re-sizing Virtual Machine and setting right scaling as per usage.
  • Conversion of Un-managed Disk to Managed Disk and knowledge of Azure Security Center /sentinel
  • Good knowledge of ticketing tool and taking appropriate action against the tickets within SLA.
  • Good Knowledge of On-boarding VMs, resolving issues, adding exclusion, creating policies.
  • Troubleshooting if any incident reported and coordinating with vendor for high severity issues and getting it resolved in duly manner.
  • Good knowledge of Incident Management, Change Management, Configuring resources.
  • Managing day to day activity of the cloud environment, supporting development teams with their requirements. Management and team coordination skills.
  • (3 Years)

Network Engineer

DBNix System
Mumbai
07.2018 - 01.2019
  • Monitoring and troubleshooting of Vsat network.
  • Maintaining RF health of Vsat devices deployed on client side.

Education

PG-DITISS - IT Infrastructure, Systems and Security

Institute for Advanced Computing and Software Development
Pune
08-2019

BACHELOR OF ENGINEERING (BE) - Electronics and Telecommunication

TSSM'S Bhivrabai Sawant College of Engineering, Pune University
Pune
01-2018

Skills

  • Cyber Security/ Application Security
  • Cloud Security – Microsoft Azure, AWS, GCP
  • Information Security, Security Operations
  • Vulnerability & Risk Management
  • Identity & Access Management
  • DevSecOps, IOT, AI, Jenkins
  • Anti-virus management
  • Cloud Management – Azure Sentinel, Defender
  • Endpoint Protection DLP
  • SIEM Systems & Security Event Monitoring- Sentinel, Splunk
  • Web Application Security Testing – OWASP Top 10, NIST & CVE-MITRE Frameworks
  • Tools: Qualys VMDR, Kibana, Burp Suite, Github, Nessus, Wireshark & Kali Linux, Splunk, Wazuh, Trellix
  • Virtualization Platform: VMware, Oracle Virtual Box
  • Cloud governance
  • Security compliance
  • CI/CD security

Certification

  • Certified Ethical Hacker v11 by EC-Council (Global)
  • Microsoft Certified: Azure Fundamentals (AZ-900)
  • Microsoft Certified: Azure Security Engineer Associate (AZ-500)
  • CNSS | Certified Network Security Specialist by ICSI (International Cyber Security Institute, UK)
  • Completed PGDM in IT Infrastructure System and Security (DITISS) from CDAC.
  • AWS Certified Solutions Architect – Associate (SAA-C03)

Accomplishments

Bagged 1st prize in IOT Quiz competition Organized by JSPM institutes, Pune.

Attended “Advanced penetration testing Workshop” conducted by Infosectrain.

Received Spot award for Best Employee in Infogain.

Interests

Playing Football/ Playstation/PC games

Timeline

Cloud security engineer

#Deloitte
11.2025 - Current

Application Security Analyst

Qualys
09.2022 - 10.2025

Cloud Support Engineer

Infogain (Silicus Technologies)
11.2019 - 09.2022

Network Engineer

DBNix System
07.2018 - 01.2019

PG-DITISS - IT Infrastructure, Systems and Security

Institute for Advanced Computing and Software Development

BACHELOR OF ENGINEERING (BE) - Electronics and Telecommunication

TSSM'S Bhivrabai Sawant College of Engineering, Pune University

Similar Profiles

CREATE PROFILE
SHAHROOK TAMBOLI