# Nilesh Bhardwaj

Nilesh Bhardwaj is a remote worker on Himalayas, Security Engineer at Sauce Labs, based in India.

Source: https://himalayas.app/@nileshbhardwaj

```text
Security Engineer at Sauce Labs securing GCP and Kubernetes, with threat models, detection systems, and cloud guardrails in production.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | India |
| Authorized to work in | India |
| Salary expectations | 51k+ EUR |
| Job categories | Security Engineer, DevSecOps Engineer |
| Skills | Cloud Security, GCP, GCP IAM And RBAC, Kubernetes Security, Threat Modeling, Security Architecture Review, Incident Response, Detection Engineering, Threat Hunting, Vulnerability Management, Security Information And Event Management (SIEM), Security Orchestration Automation and Response (SOAR), Policy as Code, CSPM, CIEM |

## About

```text
At Sauce Labs, I enforce GCP access policies across 48 projects and move Confluent Cloud access to Terraform-managed Okta groups. I’m also rolling out Wiz CNAPP across the company and reviewed a customer-facing OAuth integration before launch, surfacing security issues ahead of production.

I built and run Sauce Labs’ threat-intelligence platform on GKE, with 34 live connectors, monitoring, and runbooks. I also root-caused a KICS false positive affecting projects across the company and helped ship a group-wide severity override.

At Bobble AI, I owned endpoint detection and response for 250 devices and built security controls into Kubernetes, Terraform, and CI workflows. Earlier, as a DevSecOps Intern there, I deployed a SIEM and incident-response stack across 100 agents and added security scanning to pipelines across 400 repositories.
```

## Experience

### Security Engineer (current)

[Sauce Labs](https://himalayas.app/companies/sauce-labs). Mar 2026 - Present

```text
Enforced GCP IAM deny policies and org policies, migrated Confluent Cloud access to Terraform-managed Okta groups, and led security architecture reviews. Managed vulnerability management, threat intelligence, and incident response, including a VPN credential-stuffing campaign.
```

Skills: GCP, IAM, Terraform, Okta, Wiz, CNAPP, GKE, OpenCTI, Crowdstrike, OpenTelemetry, Prometheus, KICS, Semgrep, OAuth, Threat-Modeling, Incident-Response, Vulnerability-Management

### Security Engineer

Bobble AI. Aug 2024 - Feb 2026

```text
Owned endpoint detection and response for 250 devices, investigated and contained incidents, and configured honeypots and threat intelligence. Designed policy-as-code guardrails, automated cloud posture checks, and built a code security analytics platform.
```

Skills: Crowdstrike, EDR, Incident-Response, OPA-(Rego), OPA-Gatekeeper, Conftest, Prowler, ScoutSuite, CIEM, Kubernetes, Terraform, Authentik, LLM, Python, BASH

### DevSecOps Intern

Bobble AI. Jan 2024 - Jul 2024

```text
Deployed SIEM and IR stack across 100 agents, wrote detection rules, and added SAST, SCA, and secret scanning to CI pipelines. Built SOAR playbooks and centralized findings in DefectDojo.
```

Skills: Wazuh, Graylog, Grafana, MISP, DFIR-IRIS, GreyNoise, Semgrep, Trivy, Checkov, TruffleHog, CycloneDX, ScanCode, DefectDojo, WAF, SOAR

## Education

### Sage University

Bachelor of Computer Application, Cloud Technology & Information Security. Grade: CGPA - 7.50

```text
Bachelor of Computer Application in Cloud Technology & Information Security from Sage University, Indore, completed in July 2024.
```

## Tech stack

- GitLab
- Helm
- Jenkins
- GitLab CI
- Okta
- Terraform
- Python
- Graylog
- Loki
- PagerDuty
- Grafana
- Prometheus
- OpenTelemetry
- Falco
- Ansible
- Trivy
- ArgoCD
- Semgrep
- Bash
- Checkov
- Gitleaks
- Prowler
- Conftest
- Wazuh
- Authentik
- DefectDojo
- TruffleHog
- KEDA
- Suricata

To contact Nilesh, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Rushil Saxena](https://himalayas.app/@rushilsaxena): Senior Cloud Security Engineer, iHerb
- [Om Lakshmi Shanthi Venugopal](https://himalayas.app/@omlakshmishanthivenu): Senior Security Engineer, IBM
- [Sree Surya](https://himalayas.app/@sreesurya): AWS Security Researcher, Independent Research
- [Parth Sohaney](https://himalayas.app/@parthsohaney): OpenCRE GSoC Mentor, OWASP OpenCRE
- [Harsh Soni](https://himalayas.app/@harshsoni2): DevOps Engineer, Deloitte
- [Yash Gautam](https://himalayas.app/@yashgautam): Sr. Security Analyst, TeleVox Healthcare (West Technology Group)
- [Jatin Jena](https://himalayas.app/@jatinjena): Deputy Manager Security Engineering, Network18 Media & Investments
- [Santhoshini Ganta](https://himalayas.app/@santhoshiniganta): Associate Information Security Engineer, Gainsight
- [Suraj Verma](https://himalayas.app/@surajverma4): Cloud Security Engineer, Infosys Ltd
- [Soumya Ranjan Mohanty User](https://himalayas.app/@soumyaranjanmohantyu): Cyber Security Operations Center Intern, Government of Odisha