Open to opportunities

upal kundu287

@upalkundu287

Message

I build secure cloud platforms and automate DevSecOps controls across AWS, Kubernetes, APIs, and CI/CD pipelines.

United States

Message

What I'm looking for

I'm looking to build and secure cloud platforms through DevSecOps, application security, vulnerability management, and AWS or Kubernetes-based engineering work.

I've secured cloud platforms at Alcon, Intradiem, and Resilience by automating OWASP Top 10 checks, integrating SAST, DAST, and container scanning, and building CrowdStrike SIEM/SOAR workflows. At Alcon, I deployed FastAPI microservices on AWS EKS and implemented mTLS and certificate-based authentication in an Istio service mesh.

I've also led AWS migrations and built secure APIs, cloud infrastructure, and full-stack applications using Spring Boot, Flask, PostgreSQL, Docker, Lambda, and API Gateway. I bring hands-on experience across application security, vulnerability management, Kubernetes, AWS security, and secure software delivery.

Experience

Work history, roles, and key accomplishments

Platform Security Engineer Intern

Alcon, Inc.

May 2025 - Aug 2025 (3 months)

Engineered and deployed FastAPI microservices using Azure DevOps and AWS EKS, automating OWASP Top 10 vulnerability checks in CI/CD. Implemented mTLS and certificate-based authentication in Istio service mesh, and integrated SAST, DAST, and container scanning across AWS EKS and MuleSoft API Gateway.

fastAPI Azure DevOps Kubernetes OWASP Top 10 mTLS Istio SAST DAST Container Scanning MuleSoft

Platform Lead - Remote Desktop Control Project

Hewlett-Packard

Sep 2024 - May 2025 (8 months)

Developed a Spring Boot API for device authentication using AWS Secrets Manager and PostgreSQL. Designed AWS infrastructure for secure cross-platform communication and led application migration to AWS using SQS, Lambda, API Gateway, and JWT.

Spring Boot Secrets Manager PostgreSQL VPC Docker Lambda API Gateway JWT

Security Engineer Intern - DevSecOps

Intradiem, Inc.

May 2024 - Aug 2024 (3 months)

Built CrowdStrike SIEM and SOAR workflows detecting network security, login, sensor, and DDoS events. Developed a Python automation script using the CrowdStrike API for AWS host management and supported vulnerability management using CrowdStrike, AWS SSM, and Jenkins pipelines.

Crowdstrike SIEM SOAR Python AWS SSM Jenkins

Software Engineer, iDrone Program

University of Idaho

Dec 2023 - May 2024 (5 months)

Achieved a 90% reduction in latency for a VR drone simulator by architecting a WebSocket-based communication layer on AWS, enabling real-time support for 10+ concurrent users.

WebSockets AWS VR

Security Engineer Intern - Application Security

Resilience, Inc.

May 2023 - Aug 2023 (3 months)

Performed application security testing across AWS APIs, DNS systems, and Expo File System, resolving misconfigurations. Used Snyk for static code analysis to remediate vulnerabilities and coordinated with the AppDev team to integrate GCP SQL Server and migrate databases.

Application Security AWS DNS Expo Linux Android Studio Snyk SCA Flask GCP SQL Server

Software Engineer - Data & Cloud

Fiverr

Mar 2021 - Jul 2022 (1 year 4 months)

Led end-to-end development of 5 full-stack web applications using Flask, JavaScript, Firebase, and SQL/NoSQL databases. Architected 10+ cloud solutions in AWS, EC2, S3, GCP, Firebase, Heroku for task automation and application deployment, and integrated third-party APIs for real-time data analytics.