Open to opportunities

Kalyani Soma

@kalyanisoma

Message

I secure financial platforms across application security, cloud controls, detection engineering, and incident response.

United States

Message

What I'm looking for

I'm looking to secure financial or payment platforms through application security, cloud controls, detection engineering, vulnerability management, and automation, while partnering closely with engineering teams to reduce release risk.

At Envestnet, I secure wealth-management web applications, REST APIs, AWS workloads, containers, and CI/CD pipelines before release. I integrated Semgrep and Snyk into GitHub Actions, reducing security-review turnaround by 28%.

I automate cloud-control validation with Terraform, Checkov, and Python, cutting manual validation by 34% and improving SOC 2 audit evidence consistency. I also triage AWS Security Hub, GuardDuty, Inspector, and WAF findings and validate remediation with engineering teams.

Previously at HCLTech, I expanded Microsoft Sentinel detection coverage by 24% across Azure, Windows, endpoints, and Kubernetes environments. I investigated incidents and Qualys findings, reducing average triage time by 31% and overdue critical vulnerabilities by 18%.

At Worldpay, I supported payment gateway security through PCI DSS reviews, OWASP testing, vulnerability validation, Splunk monitoring, and network-segmentation assessments. I focus on practical remediation that protects client-facing financial platforms without slowing delivery.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

Envestnet

Sep 2024 - Present (1 year 11 months)

Evaluated threat models and data flows for wealth-management web applications and REST APIs, identifying authorization, session, and sensitive-data risks before release approvals. Integrated Semgrep and Snyk checks into GitHub Actions, reducing security-review turnaround by 28%.

Security Engineer

HCLTech

May 2021 - Nov 2023 (2 years 6 months)

Mapped client assets and log sources across Azure subscriptions, Windows servers, endpoints, and Kubernetes clusters, establishing scoped monitoring requirements for a managed financial-services security engagement. Deployed Microsoft Sentinel connectors, KQL analytics, and MITRE ATT&CK mappings, expanding detection coverage by 24%.

Azure Sentinel Sysmon incident investigation PowerShell ServiceNow Azure Kubernetes Threat Hunting Vulnerability Management

Information Security Analyst

Worldpay

Oct 2019 - Apr 2021 (1 year 6 months)

Reviewed payment gateway data flows and cardholder-data boundaries for merchant onboarding changes, documenting PCI DSS 3.2.1 requirements. Executed OWASP ZAP and Checkmarx testing against checkout applications and payment APIs, reproducing injection, authentication, and input-validation weaknesses.