Open to opportunities

shubhankar mathur

@shubhankarmathur

Senior Security Engineer at GoDaddy managing Juniper SRX and AWS firewall policies, with detection engineering and Zero Trust experience.

India

Message

At GoDaddy, I manage firewall policy for data center Juniper SRX firewalls using infrastructure-as-code, with policy changes version-controlled in GitHub. I also configure and troubleshoot Palo Alto Networks Cloud NGFW protecting AWS environments.

At Optum (UnitedHealth Group), I designed exposure and detection workflows across 50,000+ systems, reducing attack surface by 25%. I also architected and deployed Zero Trust segmentation that reduced attack propagation risk by 40%.

At CheckPoint Software Technologies, I built and tuned detection logic using firewall and SIEM telemetry, and investigated 500+ monthly security incidents. My work included packet and protocol analysis, vulnerability assessments, and Zero Trust controls across enterprise environments.

More recently, I built an Enterprise Agent Security Platform and an LLM Runtime Security Gateway. These projects apply deterministic authorization, threat detection, audit logging, and runtime protections such as prompt-injection and credential-leakage detection.

Experience

Work history, roles, and key accomplishments

Current

Senior Network Security Engineer

Current

GoDaddy

Jun 2026 - Present (4 months)

Manage firewall policy for data center Juniper SRX firewalls using infrastructure-as-code (IaC), with policy changes version-controlled in GitHub. Configure and troubleshoot security policies on Palo Alto Networks Cloud NGFW protecting AWS environments.

Juniper SRX Infrastructure as Code GitHub Cloud NGFW AWS Splunk Tufin Firewall Management

InfoSec Engineer

Optum (UnitedHealth Group)

Jul 2025 - Jun 2026 (11 months)

Enhanced asset visibility by integrating multiple data sources, improving asset discovery accuracy by 30%. Designed and implemented exposure and detection workflows, architected Zero Trust segmentation, and built automation pipelines to reduce attack surface and improve detection efficiency.

Asset Discovery Zero Trust Segmentation Python BASH Splunk Linux Incident Response Detection Engineering CMDB Cloud Security Generative AI Security

CFTS - SRX Security Engineer

Juniper Networks

May 2025 - Jul 2025 (2 months)

Performed deep packet-flow and protocol-level analysis to investigate complex security issues in SRX platforms. Debugged interactions across network security controls and collaborated with cross-functional teams to resolve critical issues.

Packet Analysis Protocol Analysis Juniper Junos Firewalls NAT IPSEC SSL VPN IDS IPS BGP OSPF Troubleshooting

Cybersecurity Consultant

Check Point Software Technologies

May 2022 - Apr 2025 (2 years 11 months)

Designed and implemented security controls across 100+ enterprise environments, improving security posture and reducing breach frequency by 40%. Built and tuned detection logic, analyzed 500+ monthly incidents, and led technical mentorship for junior engineers.

Network Segmentation Identity Aware Proxy Attack Surface Reduction Detection Engineering SIEM Packet Analysis VPN Threat Prevention Automation Vulnerability Assessment Zero Trust Mentorship

Technical Support Engineer

McAfee

Oct 2019 - Apr 2022 (2 years 6 months)

Analyzed web and network traffic using proxy telemetry, investigated 300+ monthly security issues, and engineered SIEM integrations to improve log visibility. Developed detection-aligned runbooks and performed deep debugging of SSL/TLS interception and proxy policies.

Secure Web Gateways SSL TLS URL Filtering Malware Detection Log Analysis Packet Captures Splunk QRadar SIEM Incident Response Run Books

Network Engineer

Cisco Systems

Jul 2017 - Sep 2019 (2 years 2 months)

Managed large-scale data center network infrastructure supporting multi-tier architectures and 10,000+ endpoints. Implemented network segmentation using VXLAN and SD-WAN, and applied configuration hardening and proactive monitoring to achieve 99.95% uptime.