Open to opportunities

Phalguni RS

@phalgunirs

I’m a Vulnerability Management Engineer specializing in IoT security, governance, and risk-based remediation for enterprises.

India

Message

What I'm looking for

I’m looking for Vulnerability Management/TVM and IoT/OT Device Security roles where governance, risk-based prioritization, and audit-ready reporting matter—using SLA/KPI tracking, NIST CSF/CIS alignment, and secure privileged access to drive fast remediation.

I’m a vulnerability management specialist with 11+ years of experience in vulnerability management and policy compliance across banking, financial services, and enterprise IT. I currently secure IoT device infrastructure for Wells Fargo by running IoT vulnerability management on the Phosphorus platform and onboarding it into the CyberArk core setup.

I focus on process-driven TVM: risk-based prioritization, SLA/KPI tracking, and audit-ready reporting aligned with frameworks like NIST CSF and CIS Benchmarks. At Cognizant, I led enterprise vulnerability management aligned with the NIST Cybersecurity Framework and achieved a 60%+ reduction in open vulnerabilities within eight months.

Across my roles, I coordinate remediation with business and technical teams—identifying and profiling devices, tracking SLAs, and ensuring cross-functional execution. I’ve also coordinated zero-day assessment and remediation efforts and supported security testing workflows, including web application penetration testing (Burp Suite, Nmap) for internal red-team assessments.

My core value is governance that drives outcomes: combining TVM tooling (Qualys, Tenable, Nessus, Phosphorus) with privileged access controls (CyberArk) to strengthen enterprise vulnerability posture for servers, endpoints, network devices, and IoT systems.

Experience

Work history, roles, and key accomplishments

Current

Vulnerability Management Engineer — IoT

Current

Wells Fargo

Apr 2026 - Present (3 months)

Drives enterprise IoT device security using the Phosphorus platform for vulnerability management and remediation coordination. Onboards Phosphorus into the CyberArk core setup to enable secure privileged device access and credential management.

CyberArk IoT Security Vulnerability Management NIST Cybersecurity Framework

Cybersecurity Specialist — TVM

Cognizant Technologies

Jul 2023 - Jul 2025 (2 years)

Led enterprise vulnerability management aligned to NIST CSF, defining and tracking SLA/KPI metrics and delivering weekly management reporting. Coordinated rapid assessment and remediation of zero-day vulnerabilities and maintained audit-ready process documentation.

NIST CSF Cyber Kill Chain Defense In Depth CIS Benchmarks Vulnerability Management Microsoft Defender

Senior Cyber Security Engineer

eMudhra Ltd

Oct 2021 - Jul 2023 (1 year 9 months)

Performed end-to-end vulnerability management in a banking SOC across servers, network devices, endpoints, and IoT systems using Tenable.SC. Conducted web application penetration testing, network reconnaissance, and CIS-benchmark baseline compliance/configuration assessments.

Tenable.Sc Vulnerability Management Web Application Testing Burp suite Nmap CIS Benchmarks

Consultant

Infrasoft Technology

Jan 2021 - Apr 2021 (3 months)

Planned and scheduled Qualys vulnerability scans and configured report templates, asset groups, tags, and scan profiles. Tracked remediation SLAs and policy compliance.

Qualys Vulnerability Scanning Policy Compliance

Associate Consultant

Atos India

Mar 2019 - Jun 2020 (1 year 3 months)

Operated Qualys VM and policy compliance workflows and ran web application scanning. Conducted CIS-aligned baseline assessments with Tenable.io scans and trained team members on VM operations.

Qualys Vulnerability Management Policy Compliance Web Application Scanning Tenable CIS Benchmarks

Senior Project Engineer

Wipro

Dec 2017 - Mar 2019 (1 year 3 months)

Configured and managed Qualys vulnerability scans and assisted with web application assessments. Supported security testing activities using Burp Suite.

Qualys Vulnerability Scanning Web Application Testing Burp suite