Arvind Sai

Led SOC 2 Type II audits readiness with NIST/DoD aligned gap analyses, risk assessments, maintaining 99% uptime of vulnerability scanning infrastructure Performed penetration testing on web (Burp Suite, Nessus), AI/LLM (custom scripts), and GCP cloud infrastructure, remediating 15+ vulnerabilities Automated vulnerability testing for the DAIODE AI platform using Nessus and custom scripts, improving detection efficiency by 40% across distributed systems

Senior Cybersecurity Engineer at Lumena Energy (2025-09 – Present)

• Led SOC 2 Type II audits readiness with NIST/DoD aligned gap analyses, risk assessments, maintaining 99% uptime of vulnerability scanning infrastructure
• Performed penetration testing on web (Burp Suite, Nessus), AI/LLM (custom scripts), and GCP cloud infrastructure, remediating 15+ vulnerabilities
• Automated vulnerability testing for the DAIODE AI platform using Nessus and custom scripts, improving detection efficiency by 40% across distributed systems
• Designed threat models and conducted secure code reviews across Python and JavaScript codebases to identify vulnerabilities in production AI/ML environments
• ImplementedCI/CD security controls and PowerShell/Python automation scripts to reduce cyber-attack risks across Windows Server and RHEL/Unix environments
• Authored threat models and security specifications while managing PKI/TLS certificate infrastructure and cryptographic implementations
• Collaborated with developers, Deployment, and Operations teams to implement security designs and resolve complex issues

Cybersecurity Engineer (Contract) at Wells Fargo (2024-07 – 2025-08)

• Architected real-time threat-detection pipelines (Splunk, GuardDuty) processing 2M+ events/day, reducing MTTD by 35% and accelerating MTTR by 20%
• Engineered data pipelines with Apache Airflow and AWS Lambda, cutting breach vectors 20% while handling 5TB+ financial transactions in full PCI-DSS compliance
• Deployed 30+ Splunk detection rules for APT, phishing, and malware, boosting true-positive rates and reducing SOC noise
• Performed in-depth vulnerability assessments with Burp Suite and Metasploit, mitigating 95% of critical production vulnerabilities
• Streamlined incident response through Python- and Bash-based automation, reducing manual intervention by 30% and maintaining SLA compliance for 200+ daily incidents
• Enforced NIST 800-53 controls for 10+ apps while mentoring analysts and leading security training

Security Analyst at Renault Nissan Technology & Business Centre India (2022-07 – 2023-06)

• Deployed firewalls, IDS/IPS, and CrowdStrike/Tanium EDR across 1000+ enterprise endpoints
• Analyzed security events via IBM QRadar SIEM and automated incident response with Siemplify/Resilient SOAR
• Directed vulnerability assessments using Nessus/Qualys while maintaining ISO/IEC 27001 compliance
• Managed GCP security environments and configured Proofpoint TAP email protection with Cloud Access Security Broker
• Investigated incidents using IBM QRadar, EDR (CrowdStrike/Tanium), and IDS/IPS telemetry, documenting findings and coordinating containment with IT

IT Security Analyst Intern at Gurugram Cyber Cell (2021-06 – 2021-07)

• Monitored network health using Azure Sentinel, maintaining 99.5% availability and data integrity across critical systems
• Conducted thorough security incident reviews of 50+ cases, producing post-incident reports that informed and strengthened the organization's incident response protocols
• Built an alert correlation system in Azure Sentinel, cutting false positives by 20% and improving threat escalation
• Documented and analyzed 50+ security incidents in Azure Sentinel, improving alert correlation logic and strengthening incident response runbooks for the team

Master of Applied Science in Cybersecurity Engineering – Illinois Institute of Technology (2023-2025)

Bachelor of Engineering in Computer Science – Anna University (2018-2023)