Looking for a job

Ranjan Kalita

@ranjankalita

Message

Cybersecurity Architect at QuEST Global, securing healthcare products with zero-trust architecture and DevSecOps.

India

Message

At QuEST Global, I architect security frameworks for medical device and healthcare product lines, including work for Canon Medical and GE Healthcare. I define IAM policies, network segmentation, and data protection controls across cloud and on-premises environments.

I also integrate SAST, DAST, and vulnerability scanning into CI/CD workflows, and established vulnerability management governance that achieved 95% STIGs benchmark compliance. Earlier, I conducted penetration testing, red team exercises, and security assessments at RLabs Enterprise Services, HCL Technologies Ltd, and Convergys India Services.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Architect — Project Leader

Current

QuEST Global

Jul 2020 - Present (6 years 3 months)

Architected end-to-end security frameworks for medical device and healthcare product lines, defining IAM policies, network segmentation models, and data protection mechanisms compliant with HIPAA, GDPR, STIGs, and FIPS. Led threat modelling, DevSecOps pipeline integration, and vulnerability management governance, achieving 95% STIGs compliance.

Security Architecture IAM Network Segmentation Zero Trust Threat Modeling DevSecOps SAST DAST Vulnerability Management HIPAA GDPR DISA STIGs FIPS Rally IBM Rational DOORS

Senior Security Engineer

RLabs Enterprise Services

Dec 2019 - Jun 2020 (6 months)

Evaluated and documented enterprise security architecture posture through end-to-end penetration testing of Web applications and APIs. Led red team exercises and conducted secure code architecture reviews, standardizing penetration testing documentation.

Penetration Testing Red Team Secure Code Review Web Application Security API Security Risk Assessment

Senior Security Analyst

HCL Technologies Ltd

Dec 2016 - May 2019 (2 years 5 months)

Performed manual and automated security assessments across Web and Infrastructure environments for clients in regulated sectors. Automated security testing workflows, reducing assessment cycle time by 25% and implemented CIS benchmarks across 200+ infrastructure nodes.

Security Assessments Automation CIS Benchmarks ISO 27001 PCI DSS NIST OWASP Top 10 DAST

Security Analyst

Convergys India Services

Aug 2015 - Dec 2016 (1 year 4 months)

Executed vulnerability assessments on network infrastructure supporting enterprise-scale environments. Monitored network traffic for anomalous behavior and managed asset inventories for attack surface analysis.

Vulnerability Assessment Network Security Incident Response Asset Management