Rohan K

Highly skilled Cloud Cyber Security Specialist with over 5+ years of experience securing enterprise cloud environments across Fortune 500 and global organizations. Proven track record in designing and implementing robust cloud security architecture, risk mitigation strategies, identity & access management, and real-time threat detection for public cloud platforms (AWS, Azure, GCP). Adept at integrating security automation, DevSecOps practices, CI/CD security controls, and advanced monitoring using SIEM/SOAR.

Familiar with emerging AI/ML-driven security analytics and threat hunting frameworks.

Cloud Cyber Security Specialist at AT&T (2025-06 – Present)

• Designed and deployed scalable cloud security architecture to secure multi-account AWS and Azure environments across business units.
• Implemented Zero Trust principles leveraging Azure AD + Okta for identity protection and adaptive MFA, reducing account compromise risk by 38%.
• Integrated Azure Sentinel and Splunk for centralized SIEM across cloud workloads, with automated alerting workflows via Cortex XSOAR.
• Built Infrastructure as Code pipelines using Terraform and embedded security checks with Checkov and Snyk, reducing deployment vulnerabilities by 52%.
• Collaborated with DevOps and engineering teams to adopt secure CI/CD practices using GitHub Actions and automated secrets scanning.
• Active contributor to cloud incident response playbooks and tabletop exercises; reduced average resolution time by 25%.

Cloud Cyber Security Consultant at Hexaware Technologies (2019-08 – 2023-04)

• Performed cloud security assessments and compliance gap analysis (NIST, CIS, PCI DSS) for enterprise workloads migrated to AWS and Azure.
• Designed secure network segmentation and identity policies using AWS IAM and Azure RBAC, eliminating over-privileged access in 80+ accounts.
• Deployed AWS Config, Azure Policy, and CIS Benchmarks for continuous compliance monitoring.
• Established threat detection and incident response capabilities through AWS GuardDuty, Azure Security Center, and Splunk SOAR automation.
• Automated vulnerability scanning and compliance reporting using Qualys and Nessus, leading to measurable risk reduction.
• Provided security awareness and cloud risk training to cross-functional teams, enhancing cloud security posture and accountability.

Master of Science in Cybersecurity Operations – Webster University (2025-05)