Mukesh Chand

About Mukesh Chand

As an Application Security Engineer at U.S. Bank, I perform web application security and…

Experience

1. Security Engineer

   U.S. Bank

   Dec 2022 — Present

   Conducted application security reviews and red team assessments on internal and cloud-native apps,identifying OWASP Top 10 and business logic vulnerabilities.• Partnered with product and engineering teams to design security controls during feature planningand architecture reviews, ensuring security was embedded early in the SDLC.• Developed internal security libraries and threat modeling templates to enable secure-by-defaultimplementation across dev teams.• Performed manual and automated secure code reviews in Python, Java, JavaScript, and C# to detect flawsand advise developers on remediation.• Led mobile app security testing (Android/iOS) using MobSF, Frida, Objection, and static analysis tools touncover insecure storage and runtime behavior issues.• Built and enforced cloud security controls across AWS using IAM, KMS, CloudTrail, and security grouphardening to enforce least privilege and monitor activity.• Hardened containerized workloads with Docker and Kubernetes RBAC, network policies, and policy-as-code tools (OPA, Kyverno, Checkov).• Embedded SAST/DAST (SonarQube, OWASP ZAP) and container scanning into CI/CD workflows, enablingshift-left security.• Developed Python-based Semgrep policies and pre-commit hooks to help developers catch insecure codebefore submission.• Conducted adversarial ML evaluations by simulating evasion and poisoning attacks against fraud detectionmodels, and reviewed model APIs, training data integrity, and access controls to ensure end-to-end AI/MLpipeline security.• Performed network security assessments, reviewing segmentation, firewall rules, and NAC configurationsfor potential misconfigurations.• Automated security tasks using Python and PowerShell to validate access policies, scan logs, and streamlineincident detection workflows.• Created threat models (STRIDE) and risk assessments aligned with PCI DSS, HIPAA, and internal riskframeworks.

Education

• University of Dayton

  Master of Computer science , Computer and Information Sciences and Support Services

• Amrita Vishwa Vidyapeetham

  Bachelor of Technology - BTech, ece