Vivek Raj
Cybersecurity Engineer | Network Security | Cloud Security | SASE/SSE | IAM/PAM
Hire this person
Send a job offer directly to this candidate
About
Cybersecurity Engineering Professional with 4+ years of experience across Network Security, Cloud Security, Information Security, Zero Trust, SASE/SSE, and IAM/PAM, targeting senior-level opportunities across these interconnected security functions.
Network
Security & Security Architecture professional experienced in enterprise network protection, secure remote access, segmentation, identity-based security, policy enforcement, and security transformation across complex hybrid environments. Zero Trust & SASE/SSE professional experienced in identity-centric access, least privilege, application segmentation, secure web/SaaS access, data protection, and Shadow IT governance across environments supporting 5,000+ users, 20+ private applications, 10,000+ users, and 80+ SaaS applications.
Cloud
Security & IAM/PAM professional experienced in securing hybrid/cloud environments through identity governance, authentication, authorization, privileged access, RBAC, and least-privilege controls, with focus on integrating cloud, identity, and infrastructure security.
Security
Operations, Risk & Automation professional experienced in vulnerability management, security monitoring, threat visibility, incident response support, and security process automation, contributing to 65%+ reduction in critical/high-risk vulnerabilities, 95% asset coverage, 98% authenticated-scan success, and ~80 hours/month of manual-effort savings; familiar with DevSecOps, CI/CD, Infrastructure-as-Code, and security governance.
Experience
Security Consultant at Mercedes-Benz (2022-08 – Present)
- NGFW & Zero Trust Security: Engineered Palo Alto NGFW (PAN-OS/Panorama) security services including IPS, URL Filtering, WildFire, DNS Security, SSL Decryption, and NAT; enforced Zero Trust segmentation and identity-based policies across 20+ zones, improving threat visibility by 70%.
- SSL/TLS Security: Implemented SSL/TLS inspection across 75% of network traffic with controlled bypass policies, enhancing encrypted threat visibility by 80% while ensuring compliance and business continuity.
- SASE/SSE & Web Security: Managed Netskope NG-SWG for 10,000+ users, delivering web security policies, threat protection, URL filtering, and SaaS governance across 80+ applications.
- CASB & Data Protection: Deployed Netskope CASB (Inline/API) and DLP controls across Microsoft 365 and SaaS platforms; identified 90+ shadow IT applications, reduced unauthorized SaaS usage by 40%, lowered false positives by 60%, and prevented 50+ monthly data exfiltration attempts.
Education
Bachelor of Engineering (B.E.) in Computer Science & Engineering – CMR Institute of Technology, Bangalore (2018 – 2022)
