Sandeep Yadav

About Sandeep Yadav

As an Information Security professional with over 4 years of hands-on experience, I…

Experience

1. Assistant Manager

   Deloitte

   Jul 2025 — Present · Bengaluru, IN

   T&T – Cyber – CST – Threat Assessor – Threat Modeling Specialist - Risk Management Lead end-to-end threat assessments for critical banking applications and cloud-native architectures, ensuring proactive identification of security threats, risks, and vulnerabilities.Collaborate cross-functionally with application development, DevSecOps, cloud engineering, and cybersecurity teams to embed security-by-design principles across the SDLC.Create, maintain, and validate automated threat models using industry tools such as IriusRisk and ThreatModeler, improving early risk visibility and secure design decisions.Recommend, track, and verify mitigation strategies for identified security risks, ensuring alignment with regulatory standards such as RBI, GDPR, and ISO 27001.Utilize security platforms like Tenable, Qualys, and Prisma Cloud for vulnerability assessments, misconfiguration checks, and continuous monitoring.Conduct detailed security architecture reviews and data protection assessments for:On-premises IT applicationsCloud environments (AWS, Azure, OpenStack)Containerized deployments and FOSS-based applicationsDesign and enforce identity and access management (IAM) controls, including federated identity mechanisms and protocols like SAML, OAuth, and OpenID Connect.Review and implement network, infrastructure, application, and cloud security architectures, aligned with industry frameworks and security design patterns.Drive the deployment of cloud-native security services, including:AWS: Security Groups, WAF, Inspector, CloudWatch, Shield, CloudConfig, KMS, IAMAzure: NSG, WAF, API Management, Security Center, Storage Security, IAMPromote security awareness across technical teams by contributing to training initiatives and threat assessment workshops.Stay up to date with the latest cyber threats, vulnerability trends, attack vectors, and cloud security innovations.

Education

• Somaiya Vidyavihar University

  Master's degree, Computer Science

• University of Mumbai

  Bachelor's degree, Computer Science

• St. Lawrence Jr. College Thane

  HSC, SCIENCE