Jagadeesh K

About Jagadeesh K

Building Secure Digital Frontiers | Cybersecurity Architect | DevSecOps | Penetration Tester | Automation SpecialistFor over 13 years, I’ve been in the trenches of cybersecurity, tackling complex security challenges across architecture, vulnerability management, application security, penetration testing, DevSecOps, SOC operations, and automation. My mission? To make security seamless, scalable, and an enabler rather than a roadblock. How I Solve Problems: Architecting Secure Systems: Designed and implemented security architectures for cloud and on-prem environments, reducing attack surfaces and ensuring compliance with frameworks like NIST, CIS, and ISO 27001. Application Security & DevSecOps: Integrated SAST, DAST, and container security into CI/CD pipelines, reducing critical vulnerabilities by 60% and accelerating secure deployments. Offensive Security & Penetration Testing: Led red teaming exercises, uncovered critical vulnerabilities in APIs, networks, and applications, and provided actionable remediation strategies. Vulnerability Management & Threat Detection: Automated vulnerability prioritization, reducing mean-time-to-remediate (MTTR) by 50% while improving patch compliance across enterprise environments. Security Automation & Scripting: Developed custom security automation tools, eliminating manual processes in SOC, vulnerability management, and compliance reporting. SOC & Incident Response: Worked closely with Blue Teams, deploying threat-hunting strategies and security analytics that improved detection and reduced dwell time. Cybersecurity Architecture & Cloud Security: Designed and deployed secure architectures for cloud and hybrid environments, reducing attack surfaces by 40% and ensuring compliance with NIST, CIS, and ISO 27001. Why Work With Me?I don’t just identify security gaps—I bridge them with scalable solutions. Whether it\'s integrating security into DevOps, fortifying cloud workloads, or enhancing security operations, I bring a problem-solving mindset, deep technical expertise, and an ability to translate security needs into business value. What Sets Me Apart? I bridge the gap between security and innovation, ensuring teams move fast—securely. I believe in automation-first security, eliminating manual bottlenecks in threat detection, vulnerability management, and compliance. I don’t just identify risks—I provide actionable, scalable solutions that align with business goals.If you\'re passionate about security, innovation, and making a real impact, let’s connect!

Experience

1. Application Cyber Security Analyst Architect

   Eli Lilly and Company

   Jan 2024 — Present · Middletown, DE, US

   Optimized DAST & Vulnerability Management by executing automated scans using Qualys and WebInspect, reducing vulnerability remediation efforts by 30% through precise false-positive analysis with Burp Suite, improving security team efficiency.Strengthened Application Security & OWASP Compliance by identifying and remediating 100+ vulnerabilities across enterprise applications, ensuring adherence to OWASP Top 10 and regulatory standards, reducing high-risk exposure by 40%.Enhanced Endpoint Security with Microsoft Defender ATP by configuring and administering advanced threat protection policies, leveraging GPOs to enforce endpoint security compliance, increasing malware detection efficiency by 35%.Secured Network & API Infrastructure by designing robust Fortinet firewall policies and mitigating API security flaws, reducing DDoS attack risks by 50% and fortifying API gateways against unauthorized access and injection attacks.Standardized Threat Modeling Across Teams, leading to a 20% reduction in high-severity vulnerabilities, enhancing risk assessment consistency across key applications and strengthening secure software development practices.Integrated Threat Modeling into Enterprise Security Strategy by collaborating with Enterprise Architecture & IT teams, aligning security initiatives with business objectives, and improving proactive threat detection capabilities.• Conducted vulnerability assessments across Windows and Linux environments using enterprise vulnerability scanners to identify security weaknesses and strengthen the organization’s overall security posture.• Implemented Qualys File Integrity Monitoring for PCI-scoped applications on tagged servers by configuring monitoring rules and alert mechanisms aligned with business requirements to ensure continuous compliance and rapid detection of unauthorized changes.

Education

• Bellevue University

  Masters in Software Developnment, Security and Database

  2015 — 2016

• Swarna Bharathi College of Engineering

  Bachelors of technology in computer science, Computer Science

  2006 — 2010