SHUBHAM VIKASH JHA

Security Engineer

https://www.opentalent.in/shubham-vikash-jha

Security Engineer with 7+ years in Vulnerability Management & Cloud Security

Key Strengths

Extensive experience in Vulnerability Management, including assessment, remediation, and false positive reduction using tools like Qualys, Wiz, and Defender.
Strong background in Cloud Security (Azure) with experience in remediating misconfigurations and improving compliance (CIS/NIST).
Proficient in Threat Detection and Incident Response, including investigating phishing attacks, building automation for detection, and conducting Purple Team exercises.
Demonstrated ability to perform attack simulations (Picus) and map threats to MITRE ATT&CK, indicating a proactive security posture.
Experience with various security tools and platforms such as Qualys, Wiz, Microsoft Defender, Checkpoint, Picus, Burp Suite, Sentinel, ZeroFox, Intune, SCCM, Automox, and Panorama.
Solid understanding of security frameworks and concepts including OWASP Top 10, CIS, NIST, Incident Response, SIEM, and Risk Management.
Experience in OT security, broadening the scope of security expertise.
Certifications (SC 900, AZ-500, Qualys) validate foundational and specialized knowledge in Microsoft security and Qualys platforms.

Cultural & Operational Fit

Cultural Fit Analysis

The candidate's experience across different companies (Cognizant, PwC, Crocs Inc.) and roles, from Programmer Analyst to Information Security Engineer, demonstrates adaptability and a broad exposure to various organizational cultures and security challenges. Their involvement in diverse security domains like cloud, endpoint, email, and OT security, along with compliance and incident response, indicates a well-rounded professional who can contribute to a wide range of security initiatives. The awards received at PwC India suggest recognition for their contributions and a positive impact within previous teams.

Soft Skills & Operational Fit

The candidate demonstrates strong operational fit through their detailed descriptions of managing vendor SLAs, driving remediation programs with cross-functional teams, and building dashboards for tracking progress. Their experience in leading OWASP Top 10 remediation and conducting Purple Team exercises indicates leadership potential and a collaborative approach to security. The candidate's ability to automate detection and optimize processes suggests a proactive and efficiency-driven mindset.

AI is analyzing your overall score…

Identifying your key strengths…

Evaluating your skill match against the job requirements…

Assessing your cultural and operational fit

Experience

Crocs Inc.

Information Security Engineer

October 1, 2024 – Present

India

PwC India

Associate

March 1, 2022 – October 1, 2024

India

Cognizant technology Solutions

Programmer Analyst

July 1, 2020 – February 1, 2022

India

Certifications

SC 900: Microsoft Security, Compliance, Identity

Unknown

June 1, 2026 – Present

AZ-500

Unknown

June 1, 2026 – Present

Qualys Policy Compliance

Qualys

June 1, 2026 – Present

Qualys Cloud Agent Specialist

Qualys

June 1, 2026 – Present

Key Strengths

Extensive experience in Vulnerability Management, including assessment, remediation, and false positive reduction using tools like Qualys, Wiz, and Defender.
Strong background in Cloud Security (Azure) with experience in remediating misconfigurations and improving compliance (CIS/NIST).
Proficient in Threat Detection and Incident Response, including investigating phishing attacks, building automation for detection, and conducting Purple Team exercises.
Demonstrated ability to perform attack simulations (Picus) and map threats to MITRE ATT&CK, indicating a proactive security posture.
Experience with various security tools and platforms such as Qualys, Wiz, Microsoft Defender, Checkpoint, Picus, Burp Suite, Sentinel, ZeroFox, Intune, SCCM, Automox, and Panorama.
Solid understanding of security frameworks and concepts including OWASP Top 10, CIS, NIST, Incident Response, SIEM, and Risk Management.
Experience in OT security, broadening the scope of security expertise.
Certifications (SC 900, AZ-500, Qualys) validate foundational and specialized knowledge in Microsoft security and Qualys platforms.

Cultural & Operational Fit

Cultural Fit Analysis

Soft Skills & Operational Fit

SHUBHAM VIKASH JHA

Key Strengths

Cultural & Operational Fit

About

Top Skills

Skills

Education

Experience

Certifications

Key Strengths

Cultural & Operational Fit