paras bhangalia

I’m an Application Security / DevSecOps Cloud Security Engineer with 4+ years securing SaaS infrastructure and engineering workflows. My focus is threat modeling and making security practical for developers through secure-by-default patterns and clear remediation guidance.

At SysCloud, I performed application and infrastructure security validation using OWASP ZAP, Nmap, Trivy, and TruffleHog. I integrated SAST/SCA/container/secrets checks into CI/CD workflows and transformed scanner output into prioritized, developer-facing fixes instead of raw finding dumps.

I built AWS security automation and detection, including CodePipeline anomaly monitoring using EventBridge, CloudTrail, Lambda, PostgreSQL, and Grafana. I also reduced IAM policy sprawl by 60%+ through automated least-privilege review and trust-policy cleanup, and I supported cloud incident response and corrective controls.

I partner closely with engineering teams to reproduce findings, document risk, track remediation, and improve secure-by-design. I bring strong coverage across OWASP Top 10 testing fundamentals, CI/CD guardrails, secrets detection, AWS IAM, KMS/Secrets Manager, and container/ECR hardening.