Nimish J.

About Nimish J.

I’m Nimish Khedkhar—an AWS Cloud Security Engineer with 4+ years of hands-on experience securing, automating, and integrating cloud environments at scale. My unique edge? I pair deep AWS security expertise with MuleSoft API-first integration to build event-driven security pipelines that detect, alert, and remediate in real time.Core Expertise • API-Driven Security Automation: Designed MuleSoft flows to ingest Security Hub & GuardDuty findings, push them into ticketing systems or chatops, and trigger automated remediations via Lambda. • Cloud Security Architecture: IAM design, AWS Organizations & SCPs, VPC segmentation, and least-privilege enforcement. • SIEM & Threat Detection: Centralized logs from CloudTrail, VPC Flow Logs and application APIs into Wazuh, CrowdStrike, Qualys & Prisma Cloud. • Vulnerability & Patch Management: Orchestrated weekly AWS Inspector scans and SSM-driven patch deployments with API-based triggers. • Incident Response & Forensics: Built API endpoints for on-demand playbook execution—quarantining EC2 instances and rotating IAM keys automatically. • Compliance & Audit: Automated evidence gathering for PCI-DSS, CIS AWS Foundations & NIST 800-53 using Security Hub custom actions and MuleSoft-powered reports. • Infrastructure as Code: Terraform & CloudFormation modules for standardized security guardrails, CI/CD via GitHub Actions. If you need someone who can architect, integrate, and automate security at the speed of code—let’s connect!

Experience

1. Cloud Security Engineer & Mulesoft Developer Perficient, Inc Present

   Perficient India

   Feb 2023 — Present · Nagpur, IN

   I designed and implemented automated remediation pipelines using MuleSoft APIs, boosting AWS Security Hub compliance from 45% to 92% across more than 60 accounts.I built MuleSoft flows to feed GuardDuty and CloudTrail events into our Wazuh SIEM—enabling sub-5-minute detection and Slack alerts.I deployed and managed CrowdStrike, Qualys, and Prisma Cloud agents via Terraform, eliminating 75% of critical misconfigurations.I scheduled weekly AWS Inspector scans and used MuleSoft integrations to aggregate vulnerability data into a central dashboard, then triggered SSM-driven patch jobs.I architected a least-privilege IAM model across AWS Organizations—using SCPs and Access Analyzer—and exposed a secure API for self-service access requests.I automated incident response playbooks by linking MuleSoft triggers with AWS Lambda to isolate compromised EC2 instances and rotate IAM credentials on detection.I established continuous compliance reporting for PCI-DSS and CIS benchmarks by combining Security Hub custom actions with MuleSoft-powered audit exports.

Education

• SB Jain Institute of Technology Management and Research, Yerla

  4th year , Computer Science