Chandan Aws
Security Consulting Manager @埃森哲
Signup · Get unlimited contacts
WORK HISTORY
Security Consulting Manager @埃森哲
Toronto, ON, CA
Led cybersecurity initiatives across financial services, healthcare, retail, telecom, and insurance, optimizing risk analysis, detection, and remediation.• Deployed Qualys VMDR and CrowdStrike across 50K+ assets, reducing vulnerability backlog by 25% through automated detection, triage, and remediation workflows.• Implemented security gating in CI/CD pipelines, integrating SAST (Veracode, Fortify), DAST, SCA, and IaC scanning, embedding DevSecOps best practices into release cycles.• Integrated cloud-native security services (AWS Security Hub, Azure Defender, Prisma Cloud, Aqua Security) to detect misconfigurations, drift, and container vulnerabilities.• Conducted threat modeling (STRIDE, DREAD) on applications, infrastructure, and cloud workloads, uncovering design flaws and potential attack paths.• Authored security baselines, IR runbooks, and operational playbooks, improving incident detection and recovery times.• Built reusable security templates mapped to NIST CSF, ISO 27001, FAIR, PCI DSS, OSFI B-13, PIPEDA, GDPR, and HIPAA for regulatory compliance programs.• Presented findings to executives and technical stakeholders, translating vulnerabilities into actionable risk insights.
EDUCATION
Chitkara University
Bachelor of Engineering (B.E.), Computer Science
University of New Brunswick
Master's degree M.C.S, Computer Science
ABOUT CHANDAN AWS
Cybersecurity professional with 9+ years of experience delivering enterprise-grade security solutions across banking, government, healthcare, retail, and public sector clients. I specialize in penetration testing, threat modeling, vulnerability management, and application security, with hands-on expertise in tools such as Qualys VMDR, CrowdStrike, Prisma Cloud, CSPM, and WAF. At Accenture, I lead security consulting engagements by designing tailored vulnerability management programs, reviewing multi-cloud security architectures (AWS, Azure), and driving secure SDLC practices through SAST, DAST, and SCA integration in DevSecOps pipelines. I hold certifications including GPCS, GWAPT, CISM, and CEH, and bring a strong track record in aligning security with business goals while ensuring compliance with frameworks such as NIST CSF, ISO 27001, PCI DSS, OSFI B-13, and PIPEDA. Recognized as a trusted advisor, I excel in translating risk into strategic decisions, strengthening resilience, and enabling sustainable business growth.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.