Making security simple, Making business stronger

Hi, I'm Bharat Gandhi

A proven security specialist with 11+ years of experience helping organizations deliver transformational change in a safe and secure manner enabled by technology.

11+
Years Experience
10+
Certifications
5
Companies

About Me

I specialize in helping organizations deliver transformational change in a safe and secure manner that is enabled by technology. With extensive technical and digital transformation experience combined with a thorough understanding of technology.

Key Highlights:

History of unblocking cloud markets and large platform migrations
Agent of change, creating a "growth mindset" culture in teams
Technology enthusiast with excellent knowledge across the stack
Equally comfortable with Technical and Security decision-making
Excellent presenter, thought leader and speaker
Security Certified industry specialist

Work Experience

Director Security Architecture and Operations

Careem (E& and Uber Venture)
Dubai, United Arab Emirates
Nov 2024 - Present
  • Led the design and implementation of scalable security architectures for distributed backend systems
  • Provided expert guidance on secure coding practices, cloud security, and threat modeling
  • Facilitated collaboration between InfoSec teams, architects, engineers, and product teams
  • Spearheaded AWS services implementation and cloud security initiatives
  • Integrated security throughout the software development lifecycle (SDLC)

Senior Security Engineer L5

Amazon Web Services
Canada
Dec 2021 - Nov 2024
  • Contributed to cryptographic solutions and secure system architectures
  • Led DevSecOps initiatives for 2Pizza Teams
  • Architected complex AWS environments using ECS, S3, ALB, RDS, KMS, Lambda
  • Conducted threat modeling and security design reviews
  • Managed multiple security campaigns and gamedays

Cyber Security Manager

PwC
Gurgaon, India
Aug 2018 - Dec 2021
  • Developed and matured security metrics for IT Risk programs
  • Built Splunk and Ohana Dashboards for 176 territories
  • Implemented ISO27001 controls and conducted internal audits
  • Developed automation projects in Python and PowerShell for SOC operations
  • Managed endpoint security technologies and cloud security implementations

Senior IT Security Operations Specialist

McKinsey & Company
Global
Jan 2017 - Oct 2018
  • Managed SIEM environment and security operations
  • Developed Splunk queries and correlation searches
  • Implemented Security Orchestration and Automation Solutions
  • Conducted vulnerability assessments and penetration testing
  • Managed network security and access controls

Security Specialist

HCL Technologies
India
Nov 2013 - Jan 2017
  • Conducted risk identification and assessment according to ISO 27001:2013
  • Managed SOC operations and security monitoring
  • Implemented security policies and procedures
  • Conducted vulnerability assessments and security audits
  • Provided security training and guidance to teams

Technical Skills

Security Tools

Palo Alto Networks Cisco IDS/IPS Fortinet Splunk IBM QRadar ArcSight Qualys Nessus Burp Suite Symantec McAfee

Cloud Security

AWS GuardDuty CloudTrail Security Hub Azure MDATP O365 Security Google Cloud Cloud Infrastructure Serverless Security

Security Operations

Incident Response Threat Hunting Vulnerability Management Security Automation Compliance Management SOC Operations

Development & Automation

Python PowerShell GitLab DevSecOps Security Testing CI/CD

Certifications & Training

Certified Information Security Manager

ISACA

Azure Fundamentals

AZ-900, AZ-500

Certified Ethical Hacking

EC Council

ISO 27001:2013 Lead Auditor

ISO Certification

CISSP

Certification in Process

CompTIA Security+

CompTIA

Splunk Certifications

Architecture, Admin, Knowledge Objects, Search & Reporting

Let's Connect

Interested in discussing security strategies, cloud architecture, or potential collaboration opportunities?