Mandeep Singh Kapoor

WORK HISTORY

EDUCATION

SKILLS

ABOUT MANDEEP SINGH KAPOOR

I am a Senior Security Engineer with over 9 years of experience securing modern, cloud-native platforms and distributed applications. My background spans application security, cloud infrastructure security, and Kubernetes security, with a strong focus on building practical, scalable security controls that work in real production environments.I have extensive hands-on experience across the full software delivery lifecycle, including secure architecture design, threat modelling, vulnerability management, and runtime security. Much of my work has been centred around Kubernetes-based platforms, microservices, and cloud environments, where security must be embedded by design rather than added as an afterthought.My areas of expertise include:Application Security: secure design reviews, threat modelling, API security, authentication and authorisation patterns, vulnerability assessment, and secure SDLC practices.Cloud & Infrastructure Security: IAM design, network security, secrets management, logging and monitoring, and defence-in-depth strategies for large-scale cloud environments.Kubernetes & Container Security: cluster and workload hardening, RBAC, network policies, admission control, image security, and runtime protection, supported by CKA and CKS certifications.DevSecOps & Security Automation: integrating security controls into CI/CD pipelines, automating checks, and enabling development teams to move quickly while maintaining a strong security posture.I am comfortable working closely with platform, backend, and SRE teams, and I approach security as a shared responsibility. I value clear communication, well-documented decisions, and a risk-based approach that balances security, reliability, and developer experience.In addition to technical work, I actively contribute to improving security maturity by defining standards, improving tooling, and supporting teams through guidance and mentoring. I aim to be a trusted security partner—helping teams understand risks and make informed decisions rather than acting as a blocker.