Viikkram Kumar Jha

Accomplished Security Architect–SSE with 4 years of leading global security engineering teams and 13+ years of cybersecurity experience in Security Architecture, Secure SDLC, Application Security, Penetration Testing, Threat Modeling, and Enterprise Risk Governance. Delivered measurable business outcomes by reducing production vulnerabilities by 70%, accelerating secure product delivery by 50%, and driving security transformation across global agile engineering teams at IKEA.

Security Architect - SSE at IKEA (2021-11 – 2026-05)

• Transformed Product Security Strategy by defining roadmap and embedding Security-by-Design, Secure SDLC, Threat Modeling, and Security Architecture for 100+ products, reducing critical gaps by 65% and achieving 5/5 ratings.
• Transformed enterprise Secure SDLC by integrating Security-by-Design and Threat Modeling, reducing production vulnerabilities by 70% and accelerating delivery.
• Enhanced Application Security through Application Security Testing, OWASP Top 10 remediation, Vulnerability Assessments, and Secure Code Validation, strengthening protection for 2,000+ user stories across enterprise applications.
• Established Vulnerability Management processes by implementing IBM/HCL AppScan, leading to a 60% improvement in SLA compliance across engineering teams.
• Established scalable Security Architecture standards through design reviews and governance for cloud-native platforms, ensuring consistent security controls across global solutions.
• Led Secure SDLC adoption by driving SAST, SCA, DAST, secrets scanning, and vulnerability remediation across engineering teams, collaborating with DevOps to integrate security into CI/CD and increasing automated security coverage from 30% to 65%.
• Enhanced privileged access governance by 50% across business-critical platforms by implementing Zero Trust Security, Least-Privilege Compliance, and IAM Control Optimization.
• Automated compliance with NIST SP 800-53, ISO 27001, PCI DSS, and GDPR, enhancing Security Governance and boosting audit readiness from 35% to over 75%.
• Strengthened Third-Party Risk Management (TPRM) by performing Vendor Risk Assessments, security due diligence, and supplier security assessments, reducing third-party security exposure by 55% across strategic technology partners.
• Facilitated security strategy alignment for 25+ stakeholders by partnering with cross-functional teams to deliver key risk reporting initiatives, supporting business growth.
• Established enterprise AI Security Governance by performing AI Threat Modeling, AI Risk Assessments, and implementing LLM Security & AI Controls aligned with OWASP LLM and NIST AI RMF, enabling secure enterprise GenAI adoption.
• Led Incident Response & RCA to enhance enterprise resilience, investigating emerging attack vectors and reducing recurring security incidents by 40%.
• Directed a 13-member global cybersecurity team, achieving large-scale security transformation across retail operations through strategic planning and capability development.

Tech Lead at Capgemini Engineering (2020-07 – 2021-11)

• Spearheaded an enterprise Application Security (AppSec) transformation by establishing a unified Secure SDLC, security testing strategy, Secure by Design practices, and product security controls, increasing security assessment coverage by 90% while reducing OWASP Top 10 remediation time by 75%.
• Developed a mandatory Security Design Review framework aligned with NIST CSF, ISO 27001, and PCI DSS, reducing defects by 70% and achieving 100% adoption.
• Standardized secure engineering practices across teams by embedding security throughout the SDLC, improving testing effectiveness by 40%.
• Delivered executive security reporting that improved remediation timelines by 50%, earning Star Employee, WOW, Client First Team Excellence, and Kudos awards.

Senior Security Engineer at Capgemini Engineering (2017-09 – 2020-07)

• Validated critical security findings via PoC exploitation and risk analysis, increasing executive vulnerability acceptance by 60% and enhancing cyber risk governance.
• Addressed live banking penetration testing operations findings by remediating critical DoS and application security vulnerabilities, preventing customer-facing exploitation and reducing exposure.
• Integrated security analysis and remediation into Agile SDLC, eliminating 70% of recurring application vulnerabilities pre-deployment.
• Drove enterprise-wide Application Security, Product Security, Security Architecture, Secure Development, DevSecOps collaboration, developer enablement, and vulnerability governance initiatives across Banking, Healthcare, Government, and Engineering domains, consistently delivering award-winning security outcomes while improving organizational cyber resilience.

Application Security Consultant at Optum Global Solutions (2015-08 – 2017-08)

• Performed 55+ Vulnerability Assessments and Penetration Tests (VAPT) across web applications, APIs, cloud-hosted platforms, thick clients, and application architectures, identifying 100+ security vulnerabilities and enabling 95% remediation before production, reducing security defects by 40%.

Information Security Consultant at AKS IT Services (2014-09 – 2015-07)

Information Security Analyst at Codec Network (2012-12 – 2014-09)

Bachelor of Technology (B. Tech) in Computer Science Engineering – Punjab Technical University (2013)