Open to opportunities

Subash Muthu

@subashmuthu

Message

Cybersecurity and risk management specialist driving vulnerability reduction.

India

Message

What I'm looking for

I seek a security role where I can lead risk assessments, drive vulnerability remediation, strengthen compliance (ISO27001/NIST), and collaborate cross-functionally to improve security posture and measurable outcomes.

I am an Information Security Specialist with over 8.5 years of experience focused on cybersecurity risk management, compliance, and vulnerability remediation. I have led ISO 27001 and NIST CSF implementations, integrated SIEM and EDR tools like Splunk, and executed vulnerability programs using Qualys, Nessus and Prisma to measurably improve security posture.

I partner with IT and application teams to prioritize risks by CVSS and business impact, streamline remediation through ServiceNow workflows, and deliver metrics-driven reporting to leadership. My work has reduced critical vulnerabilities by 95%, cut remediation time by 40%, and improved audit readiness with a 90% drop in non-conformities.

Experience

Work history, roles, and key accomplishments

Current

Information Security Specialist

Current

HCLTech

Jan 2023 - Present (2 years 11 months)

Drive cybersecurity risk management and compliance, performing end-to-end IT risk assessments and vulnerability management that reduced critical vulnerabilities by 95% and cut remediation time by 40%. Produce executive risk metrics and lead ISO 27001/NIST CSF control remediation.

Vulnerability Management ISO 27001 NIST CSF Qualys Splunk CVSS Incident Response SIEM

Engineer

Tata Communications Transformation Services

May 2021 - Dec 2022 (1 year 7 months)

Performed scheduled and on-demand vulnerability scanning and triage using Qualys and Prisma Cloud, resolved scanner failures and false positives, and supported internal audits to improve remediation workflows and compliance.

Qualys Prisma ServiceNow Root Cause Analysis Nessus Snyk

Junior Engineer

Tata Communications Transformation Services

Jul 2017 - Nov 2019 (2 years 4 months)

Conducted vulnerability assessments and triage, validated web/API findings via HackerOne, and implemented DLP and endpoint controls to reduce data exfiltration and improve detection.

Nessus HackerOne Burp suite Postman Endpoint Security OWASP CVSS

Network Engineer

Vestel Telecom Services

Jul 2015 - Jun 2017 (1 year 11 months)

Managed and configured Palo Alto and Fortigate firewalls, performed firmware upgrades and policy administration, and monitored network traffic to strengthen perimeter defenses.

Palo Alto Networks Firewall Administration NAT Firmware Security Policies