Looking for a job

Saicharan Arroju

@saicharanarroju

Message

I secure cloud, applications, and infrastructure through risk-driven security assessments.

India

Message

What I'm looking for

I'm looking to continue delivering application, cloud, and platform security assessments, partnering with engineering and DevOps teams to prioritise risk, strengthen security controls, and drive practical remediation.

I'm currently conducting platform and cloud security assessments at Capgemini for HSBC, identifying misconfigurations and control gaps across applications, infrastructure, and cloud services. I use Azure CSPM, Microsoft Sentinel, Defender ATP, Microsoft Cloud App Security, and Active Directory to strengthen monitoring, identity protection, and remediation.

Previously at Deloitte, I assessed platform, application, API, and cloud environments for clients including Amazon, Macquarie, HDFC, Informatica, and Dr. Reddy's Laboratories. I identified authentication bypass, IDOR, and injection vulnerabilities, supported secure-by-design initiatives, and partnered with development and security teams to drive remediation through closure.

Across 5+ years of hands-on cybersecurity work, I've delivered penetration testing, red teaming, vulnerability management, and cloud security assessments across AWS, Azure, and GCP. I apply NIST, MITRE ATT&CK, OWASP Top 10, and PCI-DSS while translating technical findings into practical risk reports, dashboards, and remediation plans.

Experience

Work history, roles, and key accomplishments

Current

Systems Engineer

Current

Capgemini

Feb 2026 - Present (7 months)

Conducted platform and cloud security assessments across enterprise environments, identifying misconfigurations and control gaps. Performed CSPM on Azure and investigated security alerts and phishing incidents end-to-end.

Cloud Security CSPM Microsoft Sentinel Defender ATP Microsoft Cloud App Security (MCAS)Active Directory Nessus Burp suite OWASP ZAP NIST MITRE ATT&CK OWASP Top 10 Vulnerability Assessment Security Monitoring Incident Response

Consultant

Deloitte

May 2023 - Feb 2026 (2 years 9 months)

Performed platform and application security assessments across fintech, banking, pharma and cloud/SaaS environments, identifying authentication bypass, IDOR and injection vulnerabilities. Conducted API security assessments aligned with OWASP Top 10 and PCI-DSS for payment and transaction workflows.

Security Engineer

Mothersonsumi Technologies Services Ltd

Jun 2022 - May 2023 (11 months)

Conducted security and platform risk assessments across enterprise and OT-adjacent manufacturing/industrial technology environments. Performed AWS, Azure and GCP configuration reviews (CSPM) and supported secure-by-design architecture reviews.

Cloud Security AWS Azure GCP CSPM Nessus Burp suite OWASP ZAP Frida MobSF Objection Drozer Sqlmap MITRE ATT&CK OWASP Top 10 Risk Assessment Security By Design

Senior Consultant

Calyxpod

Aug 2019 - Dec 2021 (2 years 4 months)

Supported technology and security-related projects through structured analysis, task prioritisation, documentation and delivery of technical outputs. Automated repetitive operational and security-related tasks using Python, improving efficiency and reducing manual effort.

Python Automation Security Reporting Technical Documentation Project Management Risk Solutions