Vikash Mohan

• Conducting cloud security assessments across GCP and AWS, validating findings
and supporting remediation of misconfigurations and CVE exposures.
• Executing continuous vulnerability assessments across IT infrastructure,
tracking remediation progress to ensure timely risk reduction.
• Monitoring, triage, and responding to SOC alerts by onboarding and analyzing
security telemetry in Google SecOps and tools like CrowdStrike.
• Managing and tuning email security controls, enforcing DLP and phishing
protection policies, investigating policy-violating emails, and supporting phishing
simulations.
• Successfully initiated and operationalized DAST by onboarding Burp Suite,
embedding dynamic testing into secure-by-design practices.
• Played a key role in achieving SOC 2 Type II certification by aligning operational
controls, supporting audit evidence, remediating findings, and enhancing
centralized asset inventory and visibility.

• Directed enterprise-wide vulnerability management across a complex multi
cloud environment, leveraging Tenable.io to identify, assess, and track security
risks.
• Executed root cause analysis and prioritized vulnerabilities based on business
impact, governance requirements, and strict SLAs, driving effective remediation.
• Partnered with incident response, threat intelligence, red team, and cloud
security teams during active threats to enable rapid containment and mitigation.
• Engineered API‑driven automation to streamline vulnerability management
workflows, improving efficiency and reducing manual effort by 80%.
• Strengthened cloud security compliance by supporting remediation initiatives
and addressing compliance gaps across cloud