Raj Chaudhary

About Raj Chaudhary

Principal Security Architect | Cloud Security Engineering | Microsoft Security SME14+ years of advanced cybersecurity engineering and threat intelligence operations. Currently serving as Principal Security Architect at Standard Chartered Ventures, leading enterprise security strategy and architecting zero-trust frameworks across hybrid cloud environments. Core Technical Expertise:Cloud Security Architecture: Enterprise CSPM/CWPP platform development, Azure Security Center, AWS GuardDuty, multi-cloud posture management, Infrastructure-as-Code automation (Terraform/ARM), container security hardening (Kubernetes, Docker).Advanced Threat Detection: MITRE ATT & CK framework implementation, custom SIEM correlation rules (ArcSight, QRadar, Splunk, Azure Sentinel), ML-based behavioral analytics, purple team operations, EDR/XDR deployment across 200M+ endpoints.Security Engineering: Python/PowerShell automation for SOC operations, SOAR platform integration (Phantom, Demisto), threat hunting using KQL/SPL, custom IOC development, zero-day vulnerability research.Malware Analysis & Forensics: Static/dynamic analysis (IDA Pro, Ghidra, Volatility), custom exploit development, mobile app security testing (OWASP MASVS), honeypot networks (Elastic Honey, Dionaea, Kippo). Key Achievements:Microsoft Corporation: Architected global SOC handling 10M+ events daily, developed ML analytics reducing false positives by 40%, led nation-state attack response using Cyber Kill Chain methodology.Enterprise Transformations: Migrated legacy SIEM to Azure Sentinel, implemented DevSecOps pipeline (SAST/DAST/IAST), deployed threat intelligence correlation using STIX/TAXII protocols.Compliance Engineering: ISO27001, PCI-DSS, SOC2, GDPR technical controls, automated compliance monitoring, risk quantification using FAIR methodology. Certifications & Research:30+ certifications including CISA, CISM, CISSP, CEH, CHFI, AZ-500, SC-200, SANS SEC511. Continuous research in emerging threats, zero-trust architecture, and quantum-resistant cryptography.Leading cross-functional security teams, mentoring architects, and driving security-by-design principles. Experience briefing C-suite on technical risk posture and strategic investments.Ready to architect next-generation security solutions? Let\'s discuss transforming your organization\'s resilience posture.

Experience

1. Principal Security Engineer Chief Cloud Security Architect

   Confidencial

   Aug 2021 — Present

   Security Culture Champion: Cultivating a strong security culture within product, technology, and business teams, driving the adoption of sustainable security controls and achieving measurable risk reduction. •Product Expert: Possess deep product knowledge, encompassing strategy, roadmap, investment programs, and underlying technologies. Proactively identify and learn new technologies, applying critical thinking to uncover potential vulnerabilities.•Security Thought Leader: As the product\'s security subject matter expert, fostering collaboration and knowledge sharing between product and cybersecurity teams.•Risk Management: Proactively monitored key risk indicators, identified and quantified emerging security issues, and implemented timely mitigation strategies. Conducted root cause analysis to prevent recurrence.•Supply Chain Security: Partnered and influenced across the product supply chain, collaborating with stakeholders on audits, regulatory engagements, and risk assessments. Worked with third-party oversight teams to ensure secure vendor management, focusing on cloud computing and emerging technologies.•Cloud Security Expertise: Hold advanced certifications and experience in public cloud computing, with a deep understanding of security controls for data protection, resiliency, and availability. Proficient in Kubernetes, microservice architectures, and open authentication/authorization standards.•Communication & Influence: Effectively communicate complex concepts to technical and non-technical audiences. Successfully influenced peers and led cross-functional teams to design and implement security controls.•Policy & Control Translation: Translated firm-wide policies and regulatory requirements into actionable control designs for software engineers and solutions architects.

Education

• Board Institute

  Intermediate, Mathematics

  2004 — 2006

• Vishveshwarya Group of Institutions

  Bachelor of Technology (B.Tech.), Computer Science and Engineering

  2007 — 2011

• Centre for Development of Advanced Computing (C-DAC)

  PG DIPLOMA, DITISS(CYBER SECURITY)

  2012 — 2012

Skills

• Tcpdump
• C
• Incident Response
• Network Security
• Ids
• Jsp
• Wireshark
• Nessus
• Python
• Sql
• Linux
• Vulnerability Assessment
• Snort
• Firewalls
• Computer Network Operations
• Cybercrime
• Ethical Hacker
• Computer Security
• Cyber-Security
• Itil
• Application Security
• Virtualization
• Web Application Security
• Ips
• Ceh
• Wireless Security
• Antivirus
• Dns
• Computer Forensics
• Ftk
• Network Administration
• Wireless Networking
• Web Authoring Tools
• Xss
• Information Security
• System Administration
• Network Engineering
• Internet Security
• Shell Scripting
• IT Audit