Hemasujith Polam

Senior Information Security Engineer at Infosys Limited (2024-09 – Present)

Secured AWS and GCP environments by implementing least-privilege IAM policies, service account governance, and network segmentation controls across cloud workloads and enterprise applications.
Implemented encryption and key management controls using AWS KMS and cloud-native security services to protect sensitive data across storage, compute, and SaaS-integrated environments.
Built and maintained Terraform-based infrastructure deployments using reusable modules and standardised configurations to improve deployment consistency and enforce secure infrastructure baselines.
Investigated cloud security incidents, unauthorized access attempts, and data exposure risks by analysing audit logs, user activity, and misconfigurations, followed by remediation and preventive control implementation.
Managed enterprise DLP solutions including Microsoft Purview, Symantec DLP, and Zscaler to monitor sensitive data movement across endpoints, web traffic, email, and SaaS platforms.
Supported cloud and SaaS security initiatives by assessing data protection risks, strengthening access controls, and improving visibility into sensitive data usage across enterprise environments.

Cyber Security Analyst at Wipro Limited (2022-12 – 2024-09)

Supported enterprise data protection and security operations initiatives using Microsoft Purview and related security tools for data classification, policy enforcement, incident investigation, and risk visibility across enterprise environments.
Performed vulnerability assessments, remediation tracking, and security posture reviews to identify and reduce risks across endpoints, infrastructure, and enterprise applications.
Assisted with audit preparation, risk assessments, and secure configuration validation by collecting security evidence and supporting compliance initiatives aligned with enterprise security standards.
Conducted threat analysis and vulnerability prioritisation by reviewing security findings, identifying high-risk exposures, and coordinating remediation efforts with infrastructure and application teams.
Automated reporting and repetitive operational workflows using scripting and security tooling, improving process consistency and reducing manual effort in day-to-day security operations.

About