Gajraj Singh

About Gajraj Singh

19+ Years of rich and diverse experience in Cloud security, Cyber Security, Infrastructure Security Consulting, Design, Architecture, Implementation and Troubleshooting, developing customized Information Security solutions, and managing enterprise IT and cyber security solutions, SOC projects.Cloud Security Architect: AWS, GCP and Azur Cloud governance and compliance, Cloud security posture management, Cloud Services MSBs, Cloud security controls, Cloud security architecture, CASB (Cloud Access Security Broker), Cloud security migration.Security Architecture: Experience in developing Cloud Security, Cyber Security, and network security guiding principles as well as logical security architecture for Applications, Data and Infrastructure EA layers. Proficient in deep diving into multiple layers for detailed security design.Security Strategy: Review overarching Cloud Security, Cyber Security, and network security vision, existing security programs as well as can conduct analysis of present and anticipated threats and define new programs to plug in identified gaps.

Experience

1. Vice President Cloud & Digital Security

   Mashreq

   Dec 2021 — Present · Gurugram, IN

   Provide Technical SME oversight of the continuous monitoring for Cloud platforms Risk and Controls. For example: challenge and validate the shared platform’s controls design, operation, effectiveness rational, oversight of mandatory procedure and adherence to operating instructions, KCI definitions and execution, continuous monitoring plan and issue/action updates; assess overall security operational readiness per platform. Provide Technical SME support for critical business cloud adoption including workloads (direct use of cloud on org. managed cloud platform, indirect use on cloud SaaS workloads) by providing technical opinion on the workloads controls designs (sampling IAM roles permissions, configurations design/settings), and cloud risk assessment (Threat modelling, pen testing) depth and quality prior to going live. Provide Technical security opinion to risk and control owners, to ensure effective policy compliance, help identify improvements, share best practices and response to issues and cloud incidents. For example, providing SME guidance on security baseline for native cloud products prior to adoption by IT Developers, monitoring and assessing deviation from cloud native products security patterns. Provide Strategic vision and strategy on cloud and digital ecosystem. Provide technical cloud security architecture and planning. Regularly and formally document and communicate information and cyber technology risk observations, and ensure risk management items are appropriately captured in Offer SME support on the newly design cloud journey approval process, technical opinion on the adequacy of exit planning, metrics for measure risk aggregation in cloud and risk assessment methodology for cloud workload and platform. Offer opinion on the suitability of native Cloud security tooling vs 3rd party vendor security tooling e.g, containers scanning, federated IAM for control improvement

Education

• Amity University

  Postgraduate Diploma, Cyber security

• Maharshi Dayanand University

  BCA, Computer

• Delhi

  B.S.S.E

• Delhi

  C.B.S.S.E

Skills

• Firewalls
• Cehv10
• Troubleshooting
• Networking
• Bgp
• Python, Ansible
• Routing
• Ospf
• Ccna
• Wan
• Vulnerability Scanning
• Openstack
• Checkpoint
• Network Security Automation
• Network Administration
• Wide Area Network (Wan)
• Routers
• Network Security
• Cisco Technologies
• Eigrp
• Cisco Routers
• Cisco Systems Products
• Switches
• Vulnerability Assessment