Sushant Singh Tharu

Secops Engineer @Build A Rocket Boy

Edinburgh, GB

Drafted and implemented key Information Security and DevSecOps policies which includes acomplete DevSecOps lifecycle strategy for secure SDLC practices.• Discovered and demonstrated critical Jira misconfigurations, preventing unauthorized access byshowcasing a proof-of-concept and collaborating with internal teams for mitigation.• Detected exposed cleartext credentials across multiple codebases and systems using varioustools, notifying teams and reducing the risk of compromise through proactive remediation.• Conducted security assessments in the game application and account management platform,identifying issues such as brute-force vulnerabilities, insecure session handling etc.• Implemented ScoutSuite for AWS security scanning, finding misconfigurations in services likeRDS, ELB, Route53, IAM, security groups, etc, improving overall cloud security posture.• Strengthened Kubernetes security posture using tools like Polaris for configuration audits andFalco for runtime threat detection which improved observability and compliance across clusters.• Integrated GuardDuty with Slack and Arctic Wolf, enabling real-time threat detection andstreamlined incident response workflows across BARB’s cloud environment.• Built automated subdomain takeover detection pipelines using DNSReaper, continuouslymonitoring DNS assets, and preventing external hijack risks.• Enhanced Git security by introducing pre-commit secret scanning hooks, reducing chance ofcredential commit during development.• Deployed and configured SonarQube and integrated with TeamCity, improving code qualityvisibility and adapting secure CI/CD practices.• Performed load and performance testing using Hey and Locust and identified backendinefficiencies. Optimization efforts led to nearly 900% increase in requests per second figures.• Saved $1,500 per month in AWS costs by auditing infrastructure and removing obsolete,unencrypted EBS volumes during cloud security improvements.

ABC Residential Higher Secondary School

School Leaving Certificate (SLC)

London Metropolitan University

Masters of Science in Information Technology and Applied Security, Cyber Security

St. Xavier's College, Maitighar

Bachelors of Science in Computer Science and Information Technology (B.Sc. CSIT), Computer Science

Nepal Mega College

Intermediate Degree (Science)