Harsh Dimri

Information Security professional with 5+ years of experience driving enterprise vulnerability management, OT security enablement, Qualys Cloud Agent and Qualys Gateway Service (QGS) implementation, threat detection, and executive risk reporting. Experienced in risk-based prioritization, remediation governance, stakeholder engagement, and security visibility across IT, cloud, and operational technology environments. Achieved a 42% reduction in enterprise risk exposure through structured governance and accountable remediation.

Assistant Manager - Information Security at WNS Global Services (2021-09 – Present)

• Own the end-to-end vulnerability management lifecycle across IT, cloud, and OT environments, covering discovery, validation, prioritization, remediation governance, exception handling, and risk reporting.
• Reduced enterprise risk exposure by 42% by aligning remediation priorities with CVSS, exploitability, threat intelligence, asset criticality, and business impact.
• Led Qualys Cloud Agent rollout activities across workstations, servers, OT sites, and distributed locations, coordinating prerequisites, deployment, health validation, and coverage tracking.
• Implemented and supported Qualys Gateway Service (QGS) to improve agent communications and patch delivery for remote and bandwidth-sensitive sites.
• Advanced OT security visibility by coordinating asset inventories, operating-system details, internet connectivity, criticality, ownership, and deployment readiness with site and infrastructure teams.
• Assessed deployment and patching approaches for geographically distributed endpoints, considering WAN utilization, QGS routing, patch size, network load, and DNS dependencies.
• Built executive dashboards, KRIs/KPIs, exposure trends, and remediation metrics that converted technical findings into clear risk decisions and leadership actions.
• Established remediation accountability across Infrastructure, Application, IT, Security Operations, and site teams, removing blockers and escalating overdue high-risk findings.
• Led threat-hunting and continuous-monitoring activities across security tools and logs to identify anomalous behavior, hidden threats, and indicators of compromise.
• Investigated ransomware artifacts and supported incident handling in line with established information security and cybersecurity procedures.
• Served as the primary vulnerability-risk contact during high-visibility issues, communicating technical exposure, business impact, mitigation status, and residual risk to senior stakeholders.
• Troubleshot complex agent, scan, connectivity, patching, and reporting issues without relying on predefined playbooks, accelerating operational recovery and remediation progress.
• Coordinated digital forensics and incident-response support with external vendors when required and maintained access governance for security platforms.
• Participated in cyber drills, real-time attack investigation, and security-event analysis to strengthen response readiness.
• Improved reporting automation, risk measurement, and attack-surface monitoring to increase visibility and support faster decision-making.

Web Application Penetration Tester at Software Technology Parks of India | Government of India (2021-01 – 2021-07)

• Assessed two web applications, identified eight vulnerabilities, and prioritized findings according to severity and business impact.

Master of Computer Applications in Integrated BCA + MCA – Guru Gobind Singh Indraprastha University (GGSIPU) (2016-07 – 2021-07)