Open to opportunities

Mitesh Joshi

@miteshjoshi

Message

I am a cybersecurity professional with 12+ years securing cloud, application, and DevSecOps environments.

Singapore

Message

What I'm looking for

I seek a technical leadership role in cloud or product security where I can scale security programs, drive secure SDLC/DevSecOps adoption, mentor teams, and deliver measurable reductions in risk within collaborative engineering cultures.

I am a cybersecurity professional with 12+ years of hands-on experience protecting cloud, application and infrastructure environments. I specialize in cloud security strategy, secure SDLC practices, DevSecOps adoption, threat modeling and targeted security testing.

In my current role,

I define and lead cloud security strategy and roadmaps, perform threat modeling, review security architecture & design, design & implement security controls, respond to incidents. My efforts have contributed in raising compliance for crown‑jewel applications/accounts, building strong identiy foundation for web application/APIs, remediated high‑risk IAM vulnerabilities across the cloud native stack, improved MTTD/MTTR for critical issues, etc.

I translate security requirements for cross‑functional teams, mentor peers, and build practical, repeatable controls that reduce risk.

I deliver measurable improvements in security posture and seek opportunities to scale security programs and lead technical initiatives in engineering-driven organizations.

Experience

Work history, roles, and key accomplishments

Current

Senior Cybersecurity Engineer

Current

Motional

Apr 2020 - Present (5 years 4 months)

Defined and led cloud security strategy and roadmaps, improving cloud security posture so 90% of crown-jewel applications/APIs complied with baseline controls. Implemented IAM mitigations, WAF in blocking mode, CSPM automation and reduced authentication/misconfiguration issues by 90%, improving MTTD/MTTR for critical incidents.

Cloud Security AWS WAF EKS ECS Terraform DevSecOps

Senior Advisory Software Engineer

Pitney Bowes

Aug 2016 - Feb 2020 (3 years 6 months)

Drove Secure SDLC practices, performed threat modeling and SAST/DAST/OSA for products, and integrated SAST scans into CI pipelines for crown-jewel applications. Implemented WAF and anti-DDoS protections and advanced DevSecOps testing methodologies to strengthen product security posture.

SAST DAST DevSecOps Threat Modeling WAF DDoS Protection CI CD

Subject Matter Expert - Network Security

Orange Business Services

Apr 2015 - Aug 2016 (1 year 4 months)

Designed and implemented network and web security solutions and provided technical consultation for complex customer projects. Led migration and transition of 200+ customer firewalls into the managed SOC infrastructure to standardize security operations.

Network Security Solution Design Consultation

Network Specialist

Slash Support SEZ Pvt. Ltd.

Oct 2014 - Apr 2015 (6 months)

Provided L2 enterprise technical support on Juniper SRX branch gateways, troubleshooting and resolving complex issues across NAT, IPsec VPN, clustering, PPPOE, ALGs, UTM and QoS. Improved incident resolution for global customers through advanced diagnostics and fixes.

Juniper SRX IPSEC NAT L2

Assistant Manager, Information Security

Axis Bank

Jan 2013 - Oct 2014 (1 year 9 months)

Implemented and managed security solutions for banking infrastructure, enabling business by deploying SSL VPN for 250 branch locations and upgrading endpoint protection for 38,000 endpoints. Delivered advanced threat protection, enterprise mobility controls and wireless security enhancements.

Endpoint Protection VPN MDM DR Drills Vendor Management

Network Engineer

Future Focus Infotech

Jan 2011 - Jan 2013 (2 years)

Implemented and supported LAN/WAN, network security and VoIP infrastructure, and deployed network and voice security controls for a data center. Provided operational support to maintain availability and security of core network services.

Network Engineering LAN WAN Network Security VoIP Data Center Operations