Shashi Reddy

About Shashi Reddy

Senior Cloud Security Engineer with 6+ years of progressive experience designing, implementing, and governing enterprise-scale cloud security across AWS, Google Cloud Platform (GCP), and Microsoft Azure, with deep specialization in financial services security, cloud risk management, and DevSecOps enablement. Proven ability to secure highly regulated environments by enforcing policy-as-code guardrails, identity-first security models, and zero-trust architectures while ensuring confidentiality, integrity, and availability of mission-critical systems. Competentin cloud security monitoring, CSPM, IAM governance, network segmentation, data protection, and incident response, leveraging platforms such as Wiz, Microsoft Defender for Cloud, and Tenable to deliver real-time threat detection, misconfiguration remediation, and continuous risk visibility. Known for leading cloud risk assessments, threat modeling, control gap analysis, and forensic investigations, driving measurable reductions in MTTD and MTTR through automation and security playbooks.Highly effective at embedding security-by-design into the SDLC by integrating automated security controls into CI/CD pipelines, container platforms (GKE), and Infrastructure-as-Code (IaC) workflows—enabling secure cloud adoption without slowing delivery. Trusted partner to engineering, compliance, audit, and business stakeholders, translating complex technical risk into executive-level insights, influencing architectural decisions early, and strengthening enterprise security posture against evolving cloud and container threats.

Experience

1. Cloud Security Engineer

   Capital One

   Oct 2023 — Present · Austin, TX, US

   Configured, implemented, and maintained enterprise-grade security controls across multi-cloud environments including Google CloudPlatform (GCP), AWS, and Microsoft Azure, ensuring confidentiality, integrity, financial systems, and availability of cloud-hosted applications and data.Owned and administered Cloud Security Monitoring platforms (e.g, Wiz, Microsoft Defender for Cloud, Tenable Cloud Security), enabling real-time threat detection, misconfiguration identification, and continuous risk visibility across cloud estates.Created and enforced automated security guardrails using policy-as-code and native cloud security services, reducing configuration drift and strengthening baseline security posture across GCP environments.Engineered identity and access management (IAM) controls, including least-privilege access, service account governance, and role-based access control (RBAC) to mitigate insider and external threats.Implemented advanced network security protections leveraging Cloud Armor, firewall rules, VPC security controls, and segmentation strategies to protect internet-facing and internal workloads.Integrated data protection mechanisms such as Cloud KMS, encryption-at-rest and in-transit, and Data Loss Prevention (DLP) to safeguard sensitive financial and customer data.

Education

• Sri Indu College Of Engineering & Technology

  Bachelor's degree, Computer Science

• Northwest Missouri State University

  Master's degree, Computer Science