Vikas B

About Vikas B

I architect Zero Trust security across AWS, Azure, and GCP for enterprises where a breach means regulatory action — not just downtime. Currently at Johnson & Johnson. Previously Truist Bank. Zero audit findings across both.With 5+ years securing hybrid enterprise environments across healthcare and financial services, I bring something most cybersecurity engineers can\'t — deep compliance delivery across three frameworks, in two of the most regulated industries in the world, with a clean audit record throughout. What I do best: Zero Trust Architecture I own the framework — not just the tools. Defining never-trust/always-verify policies, eliminating implicit trust zones, enforcing continuous identity verification across hybrid multi-cloud environments at enterprise scale. Multi-Cloud Security Engineering AWS, Azure, GCP — end to end. VPC/VNET micro-segmentation, cloud-native firewall controls, hybrid connectivity security, and cross-region traffic enforcement across 200+ production workloads. Identity & Access Management RBAC, MFA enforcement, and privileged access management across enterprise cloud environments. I treat identity as the perimeter — because in 2026, it is. Threat Detection & Incident Response Splunk · Microsoft Sentinel · CrowdStrike Falcon · Darktrace. AI-assisted behavioral detection, threat hunting, and incident response playbooks that delivered a 40% reduction in MTTR at J&J. Compliance That Sticks PCI-DSS at Truist Bank. HIPAA at Johnson & Johnson. SOX across both. Zero deficiency findings in every audit cycle. I don\'t just meet compliance — I build the controls that make it repeatable. Security Automation Python-driven log parsing, anomaly flagging, and pre-deployment validation. I eliminate manual gaps before they become incidents

Experience

1. Cyber Security Engineer

   Johnson & Johnson

   Oct 2024 — Present · US

   Architected and owned the enterprise Zero Trust framework across hybrid multi-cloud environments — defining never-trust/always-verify policies, enforcing continuous identity verification, and designing micro-segmentation models that eliminated implicit trust zones and reduced lateral movement risk across 200+ production workloads.• Designed and enforced Identity & Access Management (IAM) policies across AWS and Azure environments, implementing role-based access control (RBAC), MFA enforcement, and privileged access management (PAM) to ensure least-privilege access across all cloud workloads and reduce identity-based attack surface.• Leveraged AI-driven security tooling including Microsoft Sentinel and Darktrace for anomaly detection and behavioral threat hunting across hybrid infrastructure, reducing mean time to detect (MTTD) unknown threats and improving alert fidelity for the SOC team.• Integrated Splunk-based centralized logging and CrowdStrike Falcon EDR telemetry with cloud threat detection tooling, strengthening real-time security visibility and enabling faster investigation and containment of potential threats.• Architected cloud-native security controls and traffic inspection policies across AWS and Azure, reducing misrouted traffic incidents by 30% and eliminating unauthorized cross-region data flows across production infrastructure.• Led complex security incident investigations across hybrid interconnects, driving a 40% improvement in MTTR and authoring repeatable incident response runbooks adopted organization wide.• Developed Python-based security automation scripts for log parsing, anomaly flagging, and pre-deployment configuration validation — reducing human-error-related misconfigurations and accelerating security review cycles.• Delivered zero audit findings across two consecutive HIPAA compliance reviews through proactive infrastructure hardening, configuration governance, and cross-functional alignment with cybersecurity and audit teams.

Education

• University of the Cumberlands

  Master of Science - MS, Information Technology