Ashwin Suresh Varma

About Ashwin Suresh Varma

As an experienced computer science engineer with a passion for cybersecurity, I specialize in developing secure and resilient systems that protect against modern cyber threats. With a strong background in Software Development and Site Reliability Engineering, combined with a deep understanding of cybersecurity best practices, I bring a unique perspective to the intersection of technology and security. My experience includes discovering and responsibly disclosing numerous high-impact security vulnerabilities in a variety of web applications and software systems on platforms like HackerOne and Bugcrowd. I have expertise in identifying common web application vulnerabilities such as cross-site scripting (XSS), SQL injection, and CSRF, as well as advanced attack techniques like server-side request forgery (SSRF), file inclusion vulnerabilities, and MFA bypassing. As a security researcher, I have a keen focus on digital forensics and malware analysis. I am keen on uncovering the latest threats and developing innovative solutions to protect against them. I specialize in conducting in-depth malware analysis using samples to identify their behavior, capabilities, and potential impact on targeted systems. I have a strong understanding and relevant experience working on network forensics and incident response. In addition, I have published a chapter on mobile forensics in a leading academic publication. In addition to my technical skills, I am a highly motivated and results-driven individual with excellent communication and leadership skills. I am committed to staying up-to-date with the latest cybersecurity trends and techniques and am always looking for new opportunities to apply my skills and knowledge in innovative ways.

Experience

1. Senior Engineer - Information Security

   PepsiCo

   Jul 2022 — Present · Hyderabad, IN

   Cloud]• Took the lead on identifying inconsistencies in the latency of Azure stateful and stateless alerts. Worked closely with Microsoft to bring down the latency and explore other solutions for the same.• Created an interactive PowerShell script that utilizes modules from Azure CLI to retrieve details regarding diagnostic settings and various integrations associated with it. POCs were run using Azure Resource Graph, Python, etc. to achieve the same as well.• Working closely with the ServiceNow platform and Incident management teams to reduce the noise within alerting.[Site Reliability Engineering (SRE)]• Ensuring that legacy processes and projects follow & comply with SRE tenets and new ones follow it from the get-go.• Coordinating, monitoring, and working closely with external contractors on implementing SRE.• Preparing and analyzing application assessments from various development teams and creating a report with recommendations & areas of improvement.• Creating in-depth metrics to evaluate compliance with SRE Golden Signals at each milestone.[Monitoring and Visualization]• Created a POC to demonstrate the successful connection between ELK (Elasticsearch, Logstash, and Kibana) and Grafana by setting up & configuring the entire product from scratch by adhering to various requirements and constraints.• Part of the team that is implementing Enterprise Grafana and overseeing action items like SSO implementation, access controls and other processes.

Education

• Vellore Institute of Technology

  Bachelor of Technology - BTech, Computer Science Engineering, 3.65/4.0

  2018 — 2022

• Our Own English High School- Sharjah

  Grade 10th, Perfect CGPA 10 (Without Upgradation)

  2014 — 2016

• Chavara Public School Pala Kottyam

  Grade 12th, Computer Science, 91%

  2016 — 2018