Looking for a job

Pratap Roy

@prataproy

I lead global vulnerability management programs that reduce enterprise cyber risk at scale.

I lead global vulnerability management for a Fortune 10 client at Accenture Technologies, spanning 161+ entities, 30,000+ assets, and 9,000+ servers across on-premises, cloud, OT, and IoT environments.

I manage a 10-member cybersecurity team while owning risk prioritization, remediation governance, exception management, zero-day response, and executive stakeholder communications. I maintained 100% SLA adherence and delivery through organizational restructuring and team transitions.

I established and lead an External Attack Surface Management program using IONIX, BlackKite, SecurityScorecard, Wiz, AppOmni, and Reco, improving security posture from 62% to 96%. I also led remediation of approximately 8,000 vulnerabilities and 20,000 security insights, contributing to a 64% reduction in major security risk.

My hands-on background includes vulnerability assessment, web application testing, firewall security, Zero Trust, CIS hardening, DDoS mitigation, and incident response across HCLTech, Tata Communications, and Indecomm Global Service.

Experience

Work history, roles, and key accomplishments

Current

Senior Managed Service Specialist (Team Lead)

Current

Accenture Technologies

May 2024 - Present (2 years 4 months)

Lead global Vulnerability Management program delivery for a Fortune 10 enterprise, managing a 10-member cybersecurity team and owning risk prioritization, remediation, and program delivery. Established and leads the External Attack Surface Management (EASM) program, improving security posture from 62% to 96%.

Senior Analyst

HCLTech

Feb 2023 - May 2024 (1 year 3 months)

Managed infrastructure vulnerability assessments using Nessus, provided prioritized remediation guidance, and conducted web application security testing against OWASP Top 10. Implemented Zero Trust architecture using Zscaler on Microsoft Azure, reducing potential attack exposure by approximately 15%.

Nessus Burp suite OWASP ZAP OWASP Top 10 Web Application Security Firewall Management Palo Alto Checkpoint Fortinet Cisco Zero Trust Zscaler Azure Network Security

Network Security Technical Associate

Tata Communications

Apr 2022 - Jan 2023 (9 months)

Performed vulnerability assessments across network devices using Nessus and implemented CIS benchmark hardening across multi-vendor environments. Monitored and mitigated DDoS attacks using Arbor Sightline.

Nessus CIS Benchmarks Network Security Cisco Juniper Nokia Huawei URL Filtering DDoS Mitigation NetScout Arbor Sightline

SOC Analyst

Indecomm Global Services

Oct 2021 - Mar 2022 (5 months)

Conducted VAPT engagements using Qualys, Nessus, Burp Suite, and HCLAppScan, including OWASP-aligned assessments and proof-of-concept validation. Served as SPOC for two international locations, coordinating security incidents and audits.