Arunaachalam Arunachalam Natarajan

Application Security Engineer @Thinking Cap

Toronto, ON, CA

Led the Security Operations team, fostering effective communication and collaboration to address security challenges.• Triage and resolve high-severity escalations, reducing response times by 20% and mitigating critical security threats efficiently.• Conducted Endpoint Host Timeline analysis using Crowdstrike and Cortex EDRs, reducing malware infections by 30% through timely remediation.• Investigated and mitigated intrusions, malware infections, and phishing campaigns using Proofpoint TAP, POD, Domain Discover, and TRAP, decreasing security incidents by 25%.• Enhanced End User Identity Protection by analyzing risky sign-ins with Azure AD and implementing mitigation strategies, reducing risks by 40%.• Designed and optimized use cases and playbooks in alignment with the MITRE ATT & CK Framework, improving incident response efficiency by 15%.• Planned and facilitated client sessions, providing technical insights and performance updates, boosting client satisfaction by 20%.• Conducted Threat Hunting for Advanced Persistent Threats (APT 28, APT 29) using Splunk and related tools, reducing potential threats by 30%.• Delivered comprehensive vulnerability assessments, identifying weaknesses and remediating them through tools like Burp Suite, Rapid7, and Checkmarx to ensure robust application security.• Implemented secure, scalable solutions as a Lead Application Developer, leveraging.NET C# and WCF, and ensured high-performance integration with Open API and RESTful API development.• Identified and resolved critical security vulnerabilities in code, enhancing application robustness through logical fixes and alignment with OWASP standards.• Strengthened web application security by integrating secure coding practices, addressing logical and structural bugs, and ensuring compliance with industry best practices.• Actively utilized application security scanning tools, streamlining vulnerability detection and resolution to improve overall application security posture