ABDUL FAHEEM A

Cyber Security Engineer

Hubstream India Pvt Ltd, Chennai

• Secrets Management: Designed and deployed enterprise secrets management using HashiCorp Vault – implemented dynamic database credentials, JIT access, PKI, and OIDC authentication for Kubernetes and CI/CD pipelines, eliminating hardcoded secrets.
• Cloud Security Posture: Managed cloud security posture across AWS (primary) and GCP (secondary) using CrowdStrike Falcon CSPM/CNAPP; enforced least-privilege IAM, encryption, and network controls via automated guardrails.
• DevSecOps: Built DevSecOps pipelines integrating SAST (SonarQube), DAST (OWASP ZAP), and SCA (Snyk) into Azure Pipelines and GitHub Actions, reducing vulnerability remediation time by 40%.
• Threat Modelling: Conducted threat modelling (STRIDE/PASTA) and Zero Trust workshops, leading to identity-centric access controls and reduced blast radius.
• Compliance Automation: Automated compliance evidence collection for SOC2 and GDPR using policy-as-code (OPA/Rego) and Terraform, cutting audit prep time by 20 hours/week.
• Incident Response: Responded to security incidents (phishing, credential compromise) using SIEM logs (Splunk) and EDR (CrowdStrike), implementing containment and post-mortem fixes.
• Infrastructure as Code: Reviewed Terraform IaC for security misconfigurations; enforced encryption, network segmentation, and least privilege through merge request feedback.