Alok Prabhat

About Alok Prabhat

A highly skilled and seasoned Cloud Security, Information Security, and Product Security Leader with over 15 years of expertise in delivering comprehensive security solutions across various domains of Information Technology. Adept at driving end-to-end security engineering and architectural practices, I have been instrumental in establishing robust Security Architecture practices and building and growing teams from the ground up. My exceptional stakeholder management skills enable effective collaboration to achieve organizational goals.An accomplished product/application/cloud security consulting professional with in-depth experience in Offensive (OSCP certified), AWS & GCP Security Certified as well as Defensive Security with experience in Security Architecture & Engineering, Dev-Ops Security Implementation, Audit & Compliance, Secure Development & Deployment, Incident Response, Security/Penetration Testing and Secure SDLC transformation/implementation driven projects. My career is defined by a deep commitment to security excellence and a passion for driving innovative security solutions that safeguard organizational assets and data.

Experience

1. Product Information Security Leader

   UKG

   Sep 2021 — Present · IN

   Working as Information Security architect responsible for advising teams on all aspects of information security (Design – Develop – Deploy – Maintain) by means of technology/tools, processes and people- Collaborate with various project heads to monitor ongoing projects and business initiatives. Ensure adherence to UKG’s security control through risk assessments for new product/service deployment- Ensure a robust cybersecurity posture by conducting architecture reviews for new products and services; evaluate efficacy of security controls, including API gateways, POD Security Policies, firewalls and containerization scans, utilizing tools such as Wiz.io (CSPM CWPP, BlackDuck, GitHub Actions, CloudArmor (WAF), IaC, Kubernetes Security, etc.)- Collaborate with the application assessment team to evaluate existing security measures; identify potential loopholes and risks and proactively work with product managers to implement effective solutions- Develop re-usable security patterns for cloud architecture (SaaS, PaaS, Iac)- Manage all aspects of cloud & API security posture reporting, including IAM, threat analytics, and any cutting-edge security tools (Checkmarx, Wiz.io, Crowdstrike, Vault, etc)- Perform deep-dive analysis for worst-case scenarios using Threat Model and evaluate appropriate controls using adversarial model of threat and impact analysis- Handle security related queries for the UKG products from customer side and work with security relationship team to publish necessary security notifications- Risk & Exception management using LogicGate and vulnerability management using Brinqa- Container and Kubernetes Security hardening and patching for the product deployments in public and private cloud- C-Suite stakeholder management to update product security metrics and various security initiatives- Hired and Mentored Associate Security Architects and worked as an enabler for my team to achieve the application/organization security objectives-

Skills

• Owasp
• Agile Security
• Application Security
• Ceh
• Pci Dss
• Cloud Security
• Security Architecture Design
• Conflict Resolution
• Web Application Security Assessment
• Web Application Security
• Process Improvement
• Security
• Application Security Assessments
• Devops Security
• Fortify
• Information Technology
• Vendor Management
• Payment Card Industry Data Security Standard (Pci Dss)
• Code Review
• Penetration Testing
• Risk Assessment
• Information Security Management
• Ethical Hacking
• Solution Architecture
• Information Security
• Application Security Architecture
• Vulnerability Assessment
• Security Testing
• Devops
• Secure Sdlc
• Vulnerability Management
• Mobile Security