Sumukh M.

About Sumukh M.

Sumukh is an experienced Cyber Security Consultant with proven expertise in secure architecture design, cloud security, and regulatory compliance. With a background in threat simulation, vulnerability remediation, and risk assessments, Sumukh supports organizations in building secure, resilient systems aligned with evolving security standards. He has led key initiatives across cloud and hybrid environments, conducted cyber maturity and ransomware readiness assessments, and supported enterprise audit programs. He is also actively involved in AI security, focusing on risks tied to Large Language Models (LLMs) and agentic AI, guided by frameworks like OWASP LLM Top 10 and MITRE Atlas. In addition to technical work, he contributes to business strategy, proposal development, and internal capability building through targeted training programs. Known for bridging strategic goals with technical execution, he helps businesses strengthen security posture, reduce risk, and prepare for emerging threats in an increasingly complex digital landscape.

Experience

1. Cyber Security Consultant

   Deloitte

   Jul 2023 — Present · Mumbai, IN

   Directed comprehensive architecture reviews for a distinctive NBFC’s mobile applications which improved application performance and security by approximately 15% before the successful market launch.2. Assessed hybrid network architecture (on-premises and cloud) for a global fluorochemical enterprise, identifying and addressing over 12 critical vulnerabilities within the AWS environment.3. Leading enterprise-level Artificial Intelligence (AI) security initiatives to address emerging security threats related to Large Language Models (LLMs) and agentic AI; in accordance with OWASP LLM Top 10 and MITRE Atlas Project.4. Developed business strategy proposals and RFP responses, securing multiple high-value client engagements; planned and delivered targeted training programs for internal teams with increased efficiency approximately 20%.5. Led ransomware readiness assessment for a leading banking institution, utilizing vulnerability assessment and penetration testing, exploit development, and red team simulations to improve response time by 40% and comply with NCIIPC guidelines.6. Performed cyber maturity assessment for a large asset manager, identifying key gaps in endpoint security, and threat assessment through red teaming and breach attack simulations, enhancing ransomware resilience by 30%.7. Designed 4 phases of data residency audits for G-SIBs, auditing 120+ applications, analysing end-to-end data flows, and drafting RBI regulatory deliverables.8. Planned and executed 3 tracks of internal audit for a leading non-life insurance firm, reducing attack surface through remediation in asset and change management and the O365 environment.9. Streamlined audit of 15+ applications for a public sector bank under Ministry of Finance directives, advising on IT posture upgrades across geographically distributed teams.

Education

• National Forensic Sciences University (NFSU)

  Master of Technology, Cyber Security

• FinX Institute Limited ( Formerly BSE Institute Limited)

  Post Graduate Diploma, Banking and Finance

• University of Mumbai

  Bachelor of Engineering, Computer Engineering

  2017 — 2020

• Maharashtra State Board of Secondary and Higher Secondary Education

  Secondary School Certificate

  2004 — 2014

• Government Polytechnic Mumbai

  Diploma, Computer Engineering

  2014 — 2017