📞 +91-6376486690 | 📍 Jaipur, Rajasthan, India
🌐 tharvid.in • LinkedIn • GitHub
✉️ stharvid@gmail.com
I'm a Senior Security Engineer with over 4 years of professional experience, currently working at Porch Group.
My expertise spans Cloud Security, DevSecOps, Incident Response, Security Automation, SOC Implementation, and Compliance Alignment.
I specialize in securing multi-cloud environments (AWS, GCP, Azure), building scalable security automation workflows, and enabling organizations to achieve faster and more reliable threat detection and response through DevSecOps and SOAR practices.
Nov 2025 – Present
Security Engineer — Jun 2024 – Nov 2025
- Developed and maintained DevSecOps pipelines integrating SAST, IaC scanning, secrets detection, container scanning, DAST, API fuzzing, and dependency scanning.
- Automated vulnerability triage and reporting for 500+ repositories across AWS, GCP, and Azure, integrating with Jira and ASPM tools.
- Implemented a SIEM with 50+ data sources, creating custom parsers, correlation rules, and SOAR response workflows for faster detection and remediation.
- Deployed and managed 10+ Kubernetes clusters into a KSPM platform with runtime protection and workload visibility.
- Automated cloud and infrastructure processes using Python, AWS Lambda, and Google Cloud Functions.
- Conducted CIS control gap assessments to ensure PCI-DSS compliance across 18 domains.
- Collaborated with business leaders and security stakeholders across multiple subsidiaries to close vulnerabilities and standardize policy enforcement.
Aug 2021 – Jun 2024
- Deployed and managed AWS-native security services — CloudTrail, Config, Inspector, Detective, Macie, GuardDuty, and Security Hub — for continuous monitoring and compliance.
- Integrated DevSecOps controls (SAST, SCA, IaC scanning, DAST, and Container scanning) directly into CI/CD pipelines.
- Designed and enforced security policies across EDR, CASB, MDM, and IAM with RBAC, SSO, and Conditional Access in Google Workspace, AWS, and GCP.
- Created custom internal security tools — including phishing simulation, TPRM automation, and DNS filtering — to improve process efficiency.
- Led incident response and vulnerability management workflows to strengthen defensive posture.
- Conducted penetration testing and infrastructure risk assessments across production environments.
Feb 2021 – Jun 2021
- Developed PoCs focused on M365 Security, Azure AD, and Okta integration for identity and access management.
- Built Azure Monitor and Dynatrace dashboards for proactive alerting and performance security insights.
- Strengthened email threat defense using Microsoft Defender for Office 365, improving phishing resilience.
- Demonstrated an early passion for cloud and identity security through independent project ownership.
Bachelor of Technology (B.Tech) — Computer Science & Engineering
📍 Government Engineering College, Ajmer | GPA: 7.94 / 10
2018 – 2022
Technologies: Cloud Security • DevSecOps • Security Automation • SOC Implementation • Incident Response • Threat Detection • SIEM • Pen Testing • IAM • DLP • ASPM • CSPM • SOAR
Tools: AWS • GCP • Azure • Python • Docker • Jenkins • Git • Kubernetes • Burp Suite • Trivy • Semgrep • Checkov • Gitleaks • OWASP ZAP • CrowdStrike • NetSkope • Mimecast • Cloudflare • CheckPoint • Coralogix • Cisco Meraki • DNSFilter • Qualys • Rapid7 • Chronicle • Okta • Azure AD
Frameworks/Standards: CIS Critical Security Controls • PCI-DSS • ISO/IEC 27001
Built an enterprise-grade SOAR workflow integrating CheckPoint, Entra ID, Okta, Mimecast, Jira, ServiceDesk, PagerDuty, CrowdStrike XDR, Exchange Online, Google Workspace, AWS, and GenAI-based analysis and enrichment to automate incident response actions triggered by SIEM detections across multiple subsidiaries, reducing MTTR significantly.
Implemented an open-source DevSecOps pipeline using Jenkins, integrating Semgrep, Checkov, Trivy, Gitleaks, OWASP ZAP, and AWS ECR scanning with automated reporting to Jira and DefectDojo for vulnerability management.
Developed a phishing simulation platform using Gophish hosted on AWS EC2 with Amazon SES for realistic phishing campaigns, boosting organization-wide email security awareness.
- 🛡️ CompTIA Security+
- ☁️ AWS Certified Security – Specialty
- 🔐 Google Cloud Professional Cloud Security Engineer
- 🐳 Docker Foundations Professional Certificate
- ☁️ AWS Certified Cloud Practitioner
- 🔐 Microsoft 365 Certified: Security Administrator Associate
- English
- Hindi
✨ Let’s connect and secure the world together! ✨