Rohith

Cybersecurity Engineer with 5 years of experience in security operations, AI/LLM security, DevSecOps, and embedded/ IoT / IoMT device security. Drove ₹40+ Crore in total new business revenue at L&T Technology Services by identifying and landing 4 new client projects through proactive opportunity development at existing accounts and separately engineering an AI-driven SOC platform (automated ML pipeline via GitHub Actions → Splunk ML Toolkit) generating ₹10 Crore in contract value. Deep expertise in threat detection, VAPT (OWASP Top 10), SIEM (Splunk), SBOM/supply chain security and compliance frameworks including NIST CSF, IEC 62443, ISO 27001, HIPAA, and FDA.

Proven ability to operate autonomously, lead cross-functional teams, and translate security risk into business outcomes.

Cybersecurity Engineer at L&T Technology Services (2021-08 – Present)

• Identified and landed 4 net-new cybersecurity projects by proactively surfacing unmet security needs during existing client engagements and connecting opportunities to senior management collectively generating ₹40+ Crore in new contract revenue over 5 years.
• Architected a fully automated ML pipeline using GitHub Actions to periodically retrain threat-detection models on SOC log data and deploy them into Splunk via the Splunk Machine Learning Toolkit automating Tier-1 alert triage and reducing mean-time-to-triage (MTTT) by ~60%.
• Designed and implemented LLM protection protocols including adversarial prompt defense, jailbreak prevention, and data poisoning detection securing enterprise AI models and AI-powered firewalls.
• Mapped AI attack surfaces to MITRE ATT&CK framework, producing threat models used by engineering and sales to win enterprise contracts.
• Managed triage of 500+ monthly security alerts across Splunk SIEM and network monitoring tools; maintained <4-hour SLA on P1 incidents, reducing false-positive escalations by 35%.
• Led root-cause analysis and post-incident reviews for 20+ security events; authored incident timelines and executive-ready reports for SOC leadership and C-suite stakeholders.
• Conducted malware analysis using Ghidra to identify IOCs; executed containment playbooks that prevented lateral movement across 3 confirmed intrusion attempts.
• Monitored email security pipeline for phishing, spoofing, and BEC indicators; flagged and remediated 150+ suspicious mail events across enterprise tenants.
• Executed end-to-end VAPT assessments (OWASP Top 10) using Burp Suite, OWASP ZAP, Nmap, Nikto, Trivy, and Metasploit across on-prem, cloud, and embedded environments; documented and remediated 200+ findings.
• Reduced high/critical open vulnerabilities by 90% over 12 months by implementing structured remediation tracking aligned to NIST SP 800-30 risk scoring.
• Developed and maintained vulnerability management procedures aligned with CIS Benchmarks, HIPAA, and FDA guidelines directly improving audit outcomes for 2 regulated-industry clients.
• Generated SBOMs using BlackDuck, Syft, and Microsoft SBOM tools for 10+ software products; identified and remediated critical third-party dependency risks in pre-release pipelines.
• Integrated static analysis (SonarQube) and container scanning (Trivy) into CI/CD workflows, shifting security left and reducing post-deployment vulnerability discovery by ~80%.
• Hardened patient-monitoring and medical IoMT devices using Yocto-based OS builds, TPM 2.0 configurations, secure boot, and STIG-aligned baselines achieving IEC 62443 compliance for 2 device product lines.
• Performed threat modeling on embedded device architectures, identifying attack surfaces and producing device-specific security requirements for engineering teams.
• Led ISO 27001 / ISMS risk assessments, internal audits, and evidence collection for 3 compliance cycles; zero non-conformities raised in external audits.
• Authored 15+ security policy documents, SOPs, incident response plans, and ISMS training materials adopted organization-wide and by 2 enterprise clients.
• Supported vendor compliance assessments and third-party security reviews, ensuring supply chain controls met NIST CSF and contractual obligations.

Integrated M.Tech in Cybersecurity – Lovely Professional University (LPU) (2021)