Resume

A second stint at Ekvayu Tech, on the build and network side. I owned the delivery pipeline — a seven-stage GitLab CI pipeline built as DevSecOps, where scanning gates the deploy instead of following it — along with monitoring for the container fleet and the firewall and segmentation work underneath it.

• Built a seven-stage GitLab CI pipeline in which security scanning gates the deploy rather than following it: Gitleaks for committed secrets, Bandit and Semgrep for SAST, Checkov against Dockerfiles and Compose definitions, and Trivy across both the filesystem and the built image.
• Fronted the pipeline with Ruff, mypy, and hadolint so a lint or type failure stops the run before anything is built, and extended it past the deploy with OWASP ZAP and smoke tests against the running service.
• Standardised promotion from development through to production across three locations, applying the same gates to every environment rather than to production alone.
• Stood up Prometheus and Grafana monitoring across 100+ Docker Compose containers running at three locations.
• Found three critical defects in a core analysis subsystem that runs each submitted job in its own container: container names were drawn from a reused numeric sequence, so one name identified different jobs over time and neither metrics nor logs could be attributed to the run that produced them.
• Configured and hardened perimeter firewalls, covering rule design and security policy configuration.
• Designed and implemented VLAN segmentation to isolate network segments and limit lateral movement.

Ekvayu Tech is a Noida-based deep-tech cybersecurity company building email phishing detection, data protection, and threat monitoring products for enterprise and government customers. I worked the offensive side: testing their own tooling and hardening the infrastructure it was built on.

• Discovered and reduced the attack surface of an internally developed security tool by remediating 15+ critical vulnerabilities via VAPT using Burp Suite and OWASP ZAP.
• Secured code repository infrastructure by migrating a GitLab server while implementing configuration hardening, access controls, and least-privilege policies.
• Resolved 10 vulnerabilities across production servers and internal applications through Nessus-based threat assessments.

A software development consultancy headquartered in Pune. I built the authentication layer for an internal project and the REST API behind it.

• Raised an internal tool to OWASP ASVS Level 2 by building an authentication API with Java Spring Boot and Keycloak.
• Delivered internal knowledge-sharing sessions on Log4j and debugging to a team of 8 engineers, getting structured logging into the team coding standard.

An international residential school in Mussoorie, where I was also a student from 2010 to 2019. I built internal tooling on the Microsoft Power Platform for the maintenance, counselling, and security departments, and worked with the IT team on campus network and access control.

• Saved 50 hours of manual work quarterly by building an invoice management system with Microsoft PowerApps and SharePoint.
• Consolidated a 7-step manual student laptop-loan process into 1 automated flow with Power Automate, saving 12 hours weekly.
• Proposed and implemented biometric check-in across 3 major campus locations, improving dormitory attendance tracking and campus access control.
• Built a Power BI dashboard for the counselling department that contributed to a 20% increase in student counselling sessions.