Open to opportunities

Bharat Joshi

@bharatjoshi1

Backend-focused security engineer building cloud identity detection, anomaly analytics, and LLM-powered investigation workflows.

India

Message

What I'm looking for

I’m looking for a backend-focused role in cloud security where I can build scalable detection pipelines, anomaly analytics, and LLM-assisted investigation tooling—working with strong engineering practices to reduce analyst workload and improve incident response.

I build backend systems for cloud identity security, turning raw logs and policies into actionable alerts. I focus on detection pipelines, orchestration, and persistence that help security teams move from investigation to remediation faster.

In my current role, I’ve engineered interactive cloud identity and correlation graphs across GCP, AWS, Azure, and SaaS platforms. I built a multi-cloud alert management and detection engine that analyzes up to 1000 identities per container and supports entity-level detection from role/permission/policy usage.

I also integrate AI/LLM capabilities directly into analyst workflows—using OpenAI APIs to generate custom detection rules from natural-language prompts, and using Ollama-based local LLMs for security summaries and investigation insights. To operationalize detections end-to-end, I implemented an alert execution pipeline spanning log ingestion, Python/ML detections, Spring Boot orchestration, PostgreSQL persistence, and UI surfacing.

Earlier, I strengthened backend reliability and performance by designing migration pipelines, scan-trigger APIs across AWS/Azure/GCP, and automated schedulers. I’ve worked across Java, Spring Boot, databases, and graph analytics (including BloodHound-style attack path visualization), and I bring a strong systems mindset in system design, LLD, and OOP.

Experience

Work history, roles, and key accomplishments

Current

Full Stack Security Engineer

Current

Whiteswan Identity Security

Nov 2024 - Present (1 year 7 months)

Built interactive cloud identity and correlation graph security platform across GCP/AWS/Azure, enabling real-time alerts, blast-radius analysis, and attack investigation. Developed an alert detection and management engine analyzing up to 1,000 identities per container, with OpenAI prompt-driven rule generation, River-based anomaly detection, and BloodHound graph integration.

Spring Boot Java Python PostgreSQL Neo4j GCP AWS Azure Ollama

Software Engineer - Backend

Clouddefense.ai

Apr 2024 - Sep 2024 (5 months)

Built backend infrastructure for multi-cloud security scans, migrating workloads from Kubernetes Jobs to AWS ECS and adding standalone scan-trigger APIs for AWS/Azure/GCP. Refactored 90% (47/52) of APIs, stabilized scan workflows with ECS client services, and implemented JSON-based data migration pipelines with automated schedulers.

Java Spring Boot PostgreSQL AWS ECS Docker Git REST APIs Azure GCP Data Migration

Software Developer Engineer

Tripjack Private Limited

Jan 2023 - Mar 2024 (1 year 2 months)

Developed a Spring Boot simulation backend and a website chatbot integrating OpenAI GPT APIs for conversational information retrieval and dynamic simulated API responses. Integrated up to 5 airline supplier APIs (search/review/booking), improved JWT authentication with caching and multithreading, and built a payment ledger for tracking and reconciliation.