Looking for a job

Bachi Bachi

@bachibachi

Cybersecurity service owner at Tech Mahindra, embedding automated security gates in CI/CD pipelines and cutting proposal turnaround time by 50%.

India

Message

What I'm looking for

Leadership role in Cybersecurity and AI adoption and transformation

At Tech Mahindra, I own delivery and strategy for Application Security, DevSecOps, and Cloud Security services across enterprise clients. I embedded automated SAST, DAST, and SCA gates and container security checks into CI/CD pipelines, and led AI-driven workflow automation that cut proposal turnaround time by 50%.

At Unisys, I directed global security service operations and served as incident owner for enterprise security events. Advanced threat detection and response capabilities reduced the attack surface by 12% and improved security effectiveness by 15%.

At MyGlamm, I owned enterprise cybersecurity programs across governance, risk, compliance, operations, and architecture. I reduced vulnerabilities by 40%, cut attack vectors by 50%, and integrated DevSecOps and DLP into the SDLC.

I also authored and served as lead architect for the OWASP TriSuElla-AIDLCA Framework, bringing security and governance controls together for conventional software, generative AI applications, and autonomous multi-agent systems. My work spans service ownership, application security, and AI security governance.

Experience

Work history, roles, and key accomplishments

Current

AppSec MSSP & Shared Services – Delivery/Practice Head

Current

Tech Mahindra

May 2024 - Present (2 years 5 months)

Spearheaded end-to-end security service ownership and delivery across Application Security, DevSecOps, and Cloud Security for enterprise clients in USA, EMEA, Australia, and APAC. Defined security service strategy, designed service catalog and SLA frameworks, and governed KPIs, driving an 8% boost in operational efficiency.

Application Security DevSecOps Cloud Security Service Ownership SLA Management KPI Reporting CxO Advisory Vendor Management AI Driven Automation Pre Sales RFP SAST DAST SCA Container Security CI CD KPI Management

Director – Cyber Security Service Delivery

Unisys

Jan 2023 - Jan 2024 (1 year)

Directed global security service operations spanning AppSec, SOC, IAM, Cloud, Network, and Endpoint Security. Owned and reported security KPIs to CXO and executive leadership, and served as incident owner for enterprise security events.

Application Security SOC IAM Cloud Security Network Security Endpoint Security KPI Reporting Incident Management Crisis Communications Root Cause Analysis Threat Detection Compliance Gap Remediation Security Technology Security Operations MTTR Risk Mitigation Compliance Response

Head of Information Security

MyGlamm

Nov 2021 - Dec 2022 (1 year 1 month)

Owned enterprise-wide cybersecurity programs covering governance, risk, compliance, security operations, and architecture. Reduced organizational vulnerabilities by 40% and cut attack vectors by 50% through proactive posture improvement and offensive security operations.

Governance Risk Management Compliance Security Operations Architecture VAPT Responsible Disclosure DevSecOps DLP SDLC Third Party Risk Management Vendor Risk Assessment Phishing Simulations Cyber Drills Cybersecurity Risk

Technology Lead (Sr. Manager) – Application Security

Infosys

Dec 2018 - Nov 2021 (2 years 11 months)

Led Application Security delivery as Senior Security Architect for major US-based business verticals. Implemented DevSecOps and Secure SDLC pipelines integrating SAST, DAST, SCA, VAPT, and risk management tooling.

Application Security DevSecOps Secure SDLC SAST DAST SCA VAPT Risk Management SLA Delivery Vulnerability Management Cloud Security Mentorship SLA Management

Consultant Security (Manager)

Verizon

May 2017 - Dec 2018 (1 year 7 months)

Managed and executed comprehensive AppSec Vulnerability Management programs encompassing DAST, SAST, DevSecOps, and Cloud Security initiatives for US enterprise clients. Delivered security overview sessions and developer training programs.

Application Security Vulnerability Management DAST SAST DevSecOps Cloud Security Security Training Developer Training