Open to opportunities

Saran Santhosh 0705

@saransanthosh0705

Message

Cyber security engineer securing enterprise apps with WAFs, SAST/CI/CD, and cloud security controls.

India

Message

What I'm looking for

I want to build AI-driven security automation that secures the SDLC end-to-end—SAST/DAST and CI/CD scanning, WAF enforcement, and cloud/compliance monitoring—while working closely with developers and product teams to reduce vulnerabilities quickly.

I help secure enterprise applications across the SDLC at Nielsen IQ, working with Cycode SAST and Wiz Cloud Security to strengthen vulnerability detection and cloud security governance. I manage Akamai WAF integrations across multiple products, standardize WAF policies across 60% of NIQ products, and migrate applications from Alert to Deny mode to improve proactive threat prevention.

I’ve also contributed to an AI-powered SAST platform using GitHub Copilot for taint analysis, integrated it into CI/CD for automated scans on every code change, and reduced false positives with AI-driven analysis. Before that, at SPAN Technology services, I implemented ISO 27001:2022, built threat modeling into the SDLC, ran OWASP-aligned pen testing, and remediated 150+ critical vulnerabilities while deploying AWS Inspector, Wazuh, and security tooling like SonarQube, GitLeaks, and ZAP.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Engineer

Current

Nielsen IQ

Jan 2025 - Present (1 year 7 months)

Collaborated with Shift-Right Security team to strengthen application security across SDLC using Cycode SAST and Wiz Cloud Security. Managed Akamai WAF integrations and standardized WAF policies across 60% of NIQ products.

Cycode Wiz Cloud Security Akamai CI CD Security SAST Taint Analysis Compliance Monitoring AI Red Teaming

Security Engineer

SPAN Technologyservices

Jan 2022 - Dec 2024 (2 years 11 months)

Implemented ISO 27001:2022 controls and achieved certification. Conducted risk assessments, internal audits, and training on ISO 27001, HIPAA, GDPR, PCI-DSS, and NIST. Integrated threat modeling into SDLC and performed pen-testing for web, API, and mobile applications.