Thushitharan Mukilvannan

Cloud Security and DevSecOps Engineer with experience in AWS cloud operations, cloud security governance, vulnerability management, and infrastructure security. Skilled in assessing cloud environments against security standards, investigating findings, analyzing CVEs, managing IAM controls, and driving remediation across engineering teams. Experienced with AWS, Azure, Terraform, Kubernetes, Datadog, and cloud security best practices, with a strong focus on secure cloud architecture, operational security, compliance, and risk reduction.

Security Engineer at IFS R&D International (2025-10 – Present)

• Investigated emerging security threats, newly disclosed CVEs, and software supply chain vulnerabilities, including malicious npm package campaigns, assessing organizational exposure and providing remediation recommendations to reduce risk.
• Used AI assisted workflows to streamline security issue management, accelerating Jira ticket creation, vulnerability classification, remediation guidance generation, and assignment to appropriate development and infrastructure teams.
• Conducted security analysis of artifacts stored in JFrog Artifactory, identifying vulnerable, outdated, or noncompliant components and reporting findings to support secure software delivery and supply chain risk management.
• Conducted security assessments for NATS deployments on Azure Kubernetes Service, identifying security weaknesses, exposure risks, and misconfigurations across Kubernetes networking, workloads, logging, encryption, and access controls.
• Designed and implemented a DevSecOps workflow by integrating CycloneDX for automated SBOM generation, OWASP Dependency-Track for software composition analysis, and Bitbucket CI pipelines to continuously identify and monitor third-party dependency vulnerabilities and supply chain risks.
• Integrated Veracode SAST and DAST scanning into Bitbucket CI/CD pipelines, enabling automated security testing throughout the Secure SDLC, identifying application vulnerabilities, correlating findings with relevant CVEs, and facilitating early remediation during code commits and pull requests.
• Reduced manual effort in penetration testing processes by developing Jira-based vulnerability management workflows that automated issue generation, severity classification, ownership assignment, remediation tracking, and verification of security fixes.

Associate Engineer, SRE, DevSecOps at London Stock Exchange Group (LSEG) (2024-09 – 2025-10)

• Performed cloud security compliance assessments across AWS accounts, ensuring alignment with CIS benchmarks and internal governance policies.
• Managed AWS IAM roles, policies, and permissions to enforce least privilege access and secure authentication across cloud environments.
• Monitored and enforced tagging standards across AWS resources to ensure accountability, cost tracking, and security visibility.
• Conducted firewall recertification and rule validation for on-premise firewalls, removing unused or outdated rules and strengthening network security posture.
• Processed network segmentation and firewall rule requests through ServiceNow, reviewing and escalating requests based on risk and compliance requirements.
• Implemented infrastructure observability using Datadog by configuring dashboards, log analytics, and proactive alerts to monitor infrastructure health and application performance.
• Automated infrastructure provisioning using Terraform and integrated deployments with GitLab CI/CD pipelines to enable secure Infrastructure-as-Code workflows.

Cyber Security Intern (Endpoint Security) at Millennium IT ESP (2023-03 – 2023-08)

• Performed firewall backups, OS upgrades, policy configuration, and hardware maintenance for Check Point firewall environments.
• Conducted vulnerability assessments using Nessus, Burpsuite and assisted in remediation of identified security risks.
• Worked with VMware vSphere environments supporting enterprise virtualization infrastructure.

Cyber Security Researcher (Freelance Bug Bounty) at HackerOne, Bugcrowd (2019-02 – 2020-01)

• Performed web application penetration testing and vulnerability research across multiple Bug Bounty platforms through HackerOne and Bugcrowd.
• Identified and responsibly disclosed security vulnerabilities aligned with OWASP Top 10, earning bounty rewards and Hall of Fame recognition from organizations including DigitalOcean, Marqeta, and Inflectra.

B.Sc. (Hons) in Information Technology, Specialized in Cyber Security – SLIIT (2020 – 2024)