Suraj Shirolikar

About Suraj Shirolikar

Experience with cybersecurity operations and implementation of AI products with robust Engineering security controls, guided by my expertise in AI and cloud security. We navigate the intricate landscape of product security and compliance, ensuring our AI innovations meet stringent standards and embody responsible engineering development practices.With strategic focus on risk assessment and mitigation, we have successfully conducted comprehensive security reviews as an Engineering team deployed vital patches Our commitment to security governance is unwavering, as we solidify Microsoft\'s position as a leader in security.SDLC & Agile Leadership of development teams to deliver high-quality software products, improving project delivery timelinesResponsible AI Systems Security: Implemented security measures for AI systems, reducing vulnerabilities of Application & Cloud Security: Enhanced security for AWS, GCP, and Azure environments, achieving a 40% reduction in security incidents.Network & System Architecture: Designed robust network and system architectures with security by design mindset.Dev-Sec-Ops & Secure Coding: Integrated secure coding practices and CI/CD pipelines, reducing code vulnerabilities by 35%.Power Firmware & Storage: Optimized firmware and storage solutions, improving performance by 15%.Firmware/Hardware/Hypervisor: Managed firmware, hardware, and hypervisor security, decreasing threat exposure by 20%.Filesystem, Encryption, Container, Kubernetes: Implemented secure filesystem, encryption, and containerization strategies, enhancing data protection by 30%.Cyber Security Leadership: Led cybersecurity initiatives, achieving a 25% improvement in overall security posture. Lead Product and programs for security.App-Sec & Product Security Controls: Strengthened application and product security controls.Customer centric Quality Assurance & Compliance: Ensured compliance with GRC standards, achieving 100% compliance certification. Experience creating business process flows framework and SOPsSecure Code Review & Threat Modelling: Conducted secure code reviews and threat modeling, identifying and mitigating 50% more vulnerabilities.EDR, Network DB, API & Endpoint Security: Enhanced endpoint detection and response, network database, API, and endpoint security, reducing incident response time by 30%.SAST, DAST, Code-QL, C-Governance: Implemented SAST, DAST, and Code-QL for code governance, improving code quality by 25%.Conducted VAPT and vulnerability assessments, reducing critical vulnerabilities by 40%.

Experience

1. Senior Program Manager

   Microsoft

   Aug 2022 — Present · Bengaluru, IN

   Led security development engineering teams with AI-enabled Microsoft products snd applications for feature development, collaborating with stakeholders and vendors. Threat Model, Security, Access management, User space, Business continuity, Encryption, MFA, FTP, secure logging features • Conducted VAPT security reviews with PSIRT teams and implemented third-party OS patching for vulnerability mitigation. Cloud and VM deployment configuration and migration on Cloud and on-prim• Managed governance for products with Copilot, Responsible AI, and LLM, ensuring adherence to security controls. Systems OS, ADO, Governance Risk and Compliance expert. working with Product and program managers• Lead development engineering org while responsible for Audit, Encryption access Storage & Network policy on cloud for Azure (AAD), AWS (IAM), GCP (Network security). DevSecOps, CI/CD, SAST DAST, Engineering development, Security features MFA, User access, Certificate management, IAM, AAD, Microsoft Defender, Incident management, On-call, Azure-Dev-Ops. AWS Networking, WAF• Led security operations for cloud-native applications, ensuring robust protection against threats. • Implemented Azure security measures and utilized MS Defender for Cloud to enhance enterprise security. • Conducted Threat Modelling and Vulnerability Assessments, significantly reducing potential security risks, implementation of DDOS, WAF, IAM on deployment and migration• Prioritize decisions and make tradeoffs for the portfolio of products, envision long term strategies in vision documents. Independently work with development teams to take them live and track post launch customer feedback and product usage.• Delivered User-Centric solutions for underserved markets, boosting engagement, Data-Driven analytics to optimize features, increasing product adoption • Led multi-department initiatives, reducing time-to-market, Security enhancement drove Min-Bar framework, improving policy compliance

Education

• B. V. Bhoomaraddi College of Engg. & Tech., Hubli

  Bachelor of Engineering

Skills

• Shell Scripting
• Sql
• Linux
• Unix
• Manual Testing
• Pipeline Management
• Security Testing
• Agile Methodologies
• Requirements Analysis
• Software Project Management
• Software Development
• Java Enterprise Edition
• Penetration Testing
• Sdlc
• Solution Architecture
• Testing