Prerna Padhee

About Prerna Padhee

Prerna is a Cloud Security & DevSecOps professional with 6.5+ years of experience securing multi-cloud environments, modernizing DevSecOps pipelines, and embedding security-by-design across large-scale organizations. She has proven success in driving measurable security maturity uplift, reducing misconfigurations, strengthening controls, and implementing automated guardrails across cloud platforms.She has delivered cloud security assessments, threat modelling, CI/CD security integration, and DevSecOps enablement for global banks, GCC enterprises, and large-scale financial institutions. She is known for combining deep technical execution with advisory leadership—translating security requirements into secure, automated, scalable engineering solutions.

Experience

1. Deputy Manager

   Deloitte

   Jan 2024 — Present

   Provided security architecture assurance for a new Digital Bank in the UAE, conducting Design Effectiveness Assessments and Threat Modeling for applications and greenfield OCI cloud infrastructure. Ensured secure-by-design principles were integrated across domains, including Data, Identity, Network, and Application Design, guaranteeing a secure foundation for launch.Led the security hardening and optimization of a critical internet-facing Audit application hosted on Azure containerized workloads. This effort significantly reduced the attack surface and high-severity vulnerabilities across production subscriptions, increasing the Azure Secure Score by 42%.Integrated security tools and practices for 20+ CI/CD pipelines for a Global bank by leveraging pre-commit hooks, mandated PR checks, artifact signing practices, Blackduck SCA, Coverity SAST, Burpsuite DAST, Trivvy image scanning resulting in defense-in-depth strategy across Software Development Lifecycle i.e. SSDLC.Established mandatory DevSecOps controls that guided Application and Platform teams, ensuring consistent adherence to security standards resulting in enhanced process auditability and embedded ownership directly within the development workflow.Strengthened release governance by integrating Ansible into Jenkins CI/CD pipelines to ensure consistent configuration deployments. Established controls that mandated releases only occur within authorized Change Request windows, effectively preventing unauthorized deployments and enhancing auditability.Developed and deployed an automated service account key rotation pipeline via Jenkins for GCP Service Accounts, ensuring strict adherence to the 90-day organizational key rotation policy. This initiative eliminated manual overheads and mitigated the risk of key mismanagement and unauthorized access.Institutionalized secure coding and IaC practices across 100+ engineers, as measured by a 20% drop in security debt in subsequent sprints.

Education

• The NorthCap University

  Bachelor of Technology, Computer Science

  2015 — 2019