Vikash Singh

Key Responsibilities: Secure Architecture Reviews: Conducted in-depth architecture assessments for product teams, identifying security gaps and formulating comprehensive risk management plans. Led design reviews for cloud-based products with a focus on transport and network security, ensuring alignment with industry standards and regulatory requirements. • Developer Engagement: Collaborated closely with development teams to explain security vulnerabilities, contextualize risks, and define actionable remediation plans. Delivered targeted education on secure coding practices and threat mitigation. • AI Product Security: Provided architectural security assessments for AI-driven products, including those leveraging OpenAI and LLM models, ensuring responsible and secure deployment. • Cloud Security Guardrails: Designed and implemented security guardrails for major cloud platforms (AWS, Azure, GCP) using both open-source tools like Cloud Custodian and commercial solutions such as Turbot. • Policy and Standards Development: Contributed to the creation and enforcement of security policies, procedures, and baseline requirements across products and business units. • Reference Architectures and Threat Models: Developed reusable reference architectures and threat models incorporating modern security controls tailored to various business unit needs and architectural patterns. • Cloud Infrastructure Security: Maintained secure cloud environments using Wiz CSPM, tracking and coordinating remediation efforts with relevant teams. • Worked towards implementation of security preventive techniques like Secure Boot, firmware encryption, and over-the-air (OTA) update security, etc. for IOT based devices. • Executed hardware security testing including penetration testing on JTAG, UART, SPI, I2C interfaces, flash memory extraction, tamper resistance analysis, and secure boot validation for medical device firmware integrity.