Jagetheeshwar Paranthaman

Cybersecurity professional with close to six years of experience across security engineering, identity and access security, cloud security, security operations and security architecture within banking and global enterprise environments. Experienced in designing, implementing and improving enterprise security controls across Microsoft 365/Azure, AWS and OCI environments, with hands-on involvement in PAM, Conditional Access, endpoint security, cloud security, vulnerability management, DLP and email security. Proven experience leading security technology implementations, coordinating cross-functional teams and vendors, and presenting security risks and recommendations to senior management.

Strong background in regulated financial environments with exposure to BNM RMiT, ISO 27001, PCI DSS and MITRE ATT&CK.

Security Engineer L2 (Security Architecture & Engineering) at Access World Malaysia (2024-12 – Present)

Drive security engineering and architecture initiatives across identity, endpoint, email, cloud and infrastructure environments, working closely with the CISO, regional IT teams and external security vendors.

• Reviewed and strengthened Microsoft Entra ID Conditional Access policies in alignment with Zero Trust principles, including MFA enforcement and removal of legacy geographic authentication exemptions.
• Designed identity security controls to improve detection of anomalous sign-in activity and presented identity threat trends, security risks and recommendations to the CISO and management.
• Led the implementation and optimisation of Proofpoint email security controls, strengthening protection against phishing, spoofing and email-borne threats while continuously tuning policies based on emerging threats and business requirements.
• Improved SentinelOne endpoint-security coverage across the organisation to 96% by identifying unmanaged and non-compliant endpoints, coordinating agent deployment with regional IT teams and establishing security requirements within device onboarding processes.
• Supported security activities during the organisation's migration to Oracle Cloud Infrastructure (OCI), collaborating with infrastructure teams and vendors to maintain endpoint-security coverage and manage security-related application exceptions.
• Leading the establishment of the organisation's annual VAPT programme, coordinating with infrastructure and application teams to define assessment scope and evaluating external security vendors for delivery.
• Develop and continuously improve security processes, technical controls and operational procedures across vulnerability management, endpoint security, identity security, email security and security change management.

Assistant Manager - Information Security Engineer at Boost Bank (2024-02 – 2024-12)

Led security engineering projects and technology implementations, coordinating internal stakeholders and security vendors to deliver controls within established project timelines.

• Supported the procurement and implementation of CyberArk Privileged Access Management (PAM), including vendor and technology evaluation, cost-benefit analysis and development of access controls for relevant user groups.
• Supported Prisma Cloud security implementation by coordinating scanner deployment across cloud environments, reviewing identified security findings and working with system owners to track remediation.
• Managed enterprise vulnerability-management activities using Tenable, prioritising vulnerabilities based on severity and system criticality and coordinating remediation with application and infrastructure owners within established SLAs.
• Managed Microsoft Defender security controls across endpoint and cloud environments, including device onboarding, security-policy optimisation and investigation of security alerts and risky sign-in activity.
• Designed and supported DLP controls and implementation processes, working with data protection stakeholders to align information classification with appropriate protection rules and phased deployment.
• Conducted security incident investigations and root cause analysis, collaborating with relevant teams to identify security gaps and recommend corrective controls.
• Presented security posture, vulnerability trends and risk metrics from platforms including Prisma Cloud and Microsoft Defender to management to support security decision-making.
• Reviewed and developed information security policies and controls in alignment with BNM RMiT requirements and internal security standards.

Cybersecurity Cloud Specialist at Al Rajhi Bank (2021-12 – 2024-02)

• Led the implementation and rollout of BeyondTrust Privileged Access Management (PAM), onboarding servers based on criticality and configuring privileged access controls, permissions and approval workflows for administrative and service accounts.
• Led an enterprise Microsoft 365 device onboarding initiative, coordinating IT teams, stakeholders and external vendors while managing security controls including Conditional Access, endpoint protection and DLP.
• Reviewed cloud security and vulnerability findings across AWS environments using AWS Security Hub and Amazon Inspector, coordinating remediation with infrastructure and system owners.
• Coordinated threat intelligence, penetration testing, vulnerability assessments and red-team activities, working with internal teams and external security providers to track remediation and takedown activities.
• Oversaw managed security resources supporting L1 security operations, while providing L2 investigation and escalation support and maintaining security controls in alignment with BNM RMiT requirements.

Inhouse Security Engineer for Alliance Bank at Alliance Bank Berhad (2020-11 – 2021-11)

• Provided SOC L2 security operations support, analysing and investigating security events escalated from SOC L1 and enterprise security technologies.
• Analysed penetration-testing and security-assessment findings and worked with application owners to coordinate remediation activities.
• Supported incident investigation, escalation and reporting to risk management, senior management and relevant regulatory stakeholders.

BSc in Cyber Security – Asia Pacific University, Bukit Jalil (2018 – 2020)

Diploma in Information and Communication Technology – Asia Pacific University, Bukit Jalil (2016 – 2018)