Arun M

Cybersecurity Engineer with 4+ years of experience in Vulnerability Management, DevSecOps, and Software Composition Analysis (SCA). Experienced in identifying and remediating infrastructure and application vulnerabilities across Linux, Windows, and AWS EKS environments using Rapid7, Qualys, and Black Duck. Skilled in securing CI/CD pipelines, enforcing compliance baselines (PCI DSS, NIST, CIS), and reducing security risks across enterprise environments.

Vulnerability Management Engineer at Tata Consultancy Services (2022-03 – Present)

• Performed vulnerability assessments using Rapid7 and Qualys, analyzed CVEs, and prioritized remediation based on CVSS, EPSS, and business risk, resulting in a 40% reduction in critical vulnerabilities across Linux, Windows, and EKS workloads.
• Executed quarterly Java, Apache, and AppDynamics upgrades using Chef cookbooks and automated patch pipelines, achieving 95% patch compliance within SLA.
• Remediated OS, Microsoft, and configuration vulnerabilities across Linux and Windows systems using CIS benchmarks, resolving 500+ high-risk issues per quarter.
• Addressed open-source dependency vulnerabilities in Maven-based EKS applications using Black Duck (SCA) and OX Security, improving build security and reducing application risk.
• Integrated SAST, SCA, and container image scanning into Jenkins CI/CD pipelines, enabling shift-left security and early vulnerability detection across development teams.
• Partnered with DevOps, Cloud, and Security teams to enforce CIS benchmark baselines across hybrid infrastructure, directly reducing misconfiguration-related vulnerability findings each quarter.
• Acted as offshore lead during non-overlapping hours, coordinating team activities, driving vulnerability remediation efforts, and ensuring SLA adherence.
• Managed end-to-end vulnerability remediation lifecycle for 1,000+ findings quarterly, maintaining SLA adherence through structured tracking and stakeholder follow-ups.
• Streamlined vulnerability triage and remediation tracking using Rapid7 and ServiceNow dashboards, enabling real-time visibility into remediation status and accelerating closure of high-risk findings.
• Provided on-call support for production security incidents, performed root cause analysis, and implemented preventive controls to avoid recurrence.
• Mentored 4 engineers on vulnerability triage, remediation strategies, and system hardening best practices.

Bachelor of Engineering (B.E.) – Kongu Engineering College (2017-07 – 2021-04)