Vishnu Chava

Security Engineer with hands-on experience in detection engineering and incident response using Google Chronicle SIEM across cloud (AWS, GCP) and endpoint (Windows, macOS) environments, backed by 5+ years as a DevSecOps Engineer embedding security into cloud infrastructure and CI/CD pipelines. Builds and tunes detection rules, writes automation and enrichment scripts to speed up triage, and supports incident investigations across security, IT, and engineering teams. Strong background integrating vulnerability scanning, secrets detection, and dependency analysis (OWASP ZAP, SonarQube, GitLeaks, Trivy) into pipelines, hardening IAM/RBAC, and managing TLS/certificate lifecycles.

Comfortable owning problems end-to-end, from writing a detection query to automating the response.

Security Engineer - Vayatronics Pvt Ltd - Hyderabad, Telangana

(2025-10)

• Investigate and respond to security alerts across cloud (AWS/GCP) and endpoint (Windows/macOS) environments using Google Chronicle SIEM, correlating log sources to identify and triage potential threats.
• Build and tune detection rules and Chronicle YARA-L queries to identify suspicious activity across cloud infrastructure and employee endpoints, reducing false positives and improving signal quality.
• Write automation scripts and cloud functions to enrich alerts with threat intelligence and contextual data, and to automate routine response actions, cutting manual triage time.
• Support incident investigations end-to-end, coordinating with IT and engineering teams to contain, remediate, and document findings for cloud and endpoint-based threats.
• Contribute to ongoing threat hunting activities across AWS, GCP, and endpoint fleets, using detection engineering and log analysis to proactively surface gaps in existing coverage.
• Apply DevOps/IaC background to harden the security team's own tooling — scripting, log parsers, and lightweight automation to streamline detection engineering workflows.

Senior DevOps Engineer - Head Digital Works - Hyderabad, Telangana

(2024-12 - 2025-09)

• Strengthened DevSecOps posture by integrating OWASP ZAP, SonarQube, GitLeaks, OWASP Dependency-Check, and Trivy into CI/CD pipelines, enabling early detection of vulnerabilities, exposed secrets, and misconfigurations before production.
• Enforced all AWS deployments through governed Jenkins pipelines, eliminating direct developer access to AWS resources and improving auditability and change control.
• Configured and hardened security controls for Kafka clusters — SSL/TLS encryption, authentication, and authorization — integrated with DevOps pipelines to ensure secure, compliant deployments.
• Implemented centralized logging and monitoring with ELK Stack and Prometheus-Grafana, improving observability, log correlation, and mean time to detection/resolution across production systems.
• Automated Infrastructure as Code with Terraform and Ansible, reducing environment drift and standardizing secure baseline configurations across cloud environments.
• Led operations response and root-cause investigations for infrastructure incidents, coordinating across engineering teams to ensure rapid containment and recovery.
• Automated blue-green and canary deployments via Jenkins and AWS CodeDeploy, reducing production risk and downtime during releases.
• Built lightweight, hardened Docker images and managed container lifecycle via ECR, reducing attack surface for containerized workloads.

Senior DevOps Engineer - Emids Technologies - Hyderabad

(2020-08 - 2024-12)

• Implemented secure transport (TLS/SSL) for containerized healthcare applications, managing certificate lifecycles and enforcing encryption standards across development and production.
• Managed certificate lifecycle for AKS-hosted applications, building automated renewal processes using Key Vault and certmanager to prevent expiry-related outages.
• Strengthened identity and access controls across Azure using IAM policies and role-based access control (RBAC), enforcing least-privilege access and improving auditability.
• Developed automation scripts in Python, Shell, Groovy, and Bash to streamline infrastructure provisioning, patching, and secure deployment workflows across Linux and Windows environments.
• Built Infrastructure as Code with Terraform for consistent, driftless provisioning of Azure resources across environments handling regulated health-domain data.
• Monitored AKS clusters using Azure Monitor and container insights, identifying anomalous resource usage and improving health-check and readiness-probe coverage.
• Established disaster recovery and backup strategies for Kafka clusters supporting log aggregation, minimizing data loss during failure scenarios.
• Configured Azure networking (VNets, private DNS, load balancers, routing rules) to reduce exposure and enforce secure traffic paths for production workloads.

Software Engineer - Emids Technologies — NHPRI (Neighborhood Health Plan Rhode Island)

• Managed Active Directory groups, system maintenance, and backup activities for critical database and server infrastructure.
• Executed a secure cloud migration from on-prem data center to AWS, applying security and automation best practices to reduce manual, error-prone processes.
• Implemented Git branching/merging standards and built declarative Jenkins CI/CD pipelines to bring consistency and control to release processes.

Bachelor's Degree - JNTUH (2016-06)