Swaraj Singh

• Conducted proactive threat hunts by correlating external OSINT indicators with internal firewall logs; investigated IAM anomalies and phishing campaigns and documented findings using MITRE ATT&CK for Tier 2 escalation.
• Supported enterprise GRC initiatives and NIST SP 800-53 compliance audits, prepared risk-management documentation, and ran automated VAPT scans to prioritize remediation.
• Executed malware tabletop simulations and incident-response playbooks for host isolation, helping formalize end-to-end security-event workflows.

• Developed centralized role-based authentication workflows, reducing administrative onboarding and configuration time by 35%.
• Led PASTA threat-modeling sessions that surfaced 12+ potential attack vectors early in design and reduced post-deployment application-security defects by 40%.

Melbourne, Australia · Remote

• Built Sentinel-1 SAR data-processing workflows in Google Earth Engine for large-scale environmental mapping and produced technical implementation reports.

• Built an automated threat-intelligence platform that aggregates 10+ authoritative security sources, enriches vulnerabilities through NVD and CISA KEV, generates executive summaries, and publishes daily through GitHub Actions.

• Developed a packaged CLI and client-side dashboard for testing access management, change management, backup and recovery, and segregation-of-duties controls, with findings management and framework crosswalking.
• Added client-side CSV re-testing and DOCX audit-report generation for repeatable control reviews.

• Created a portfolio GRC programme for a fictional fintech with eight security policies, numbered safeguards, a control-traceability matrix, and exception and review-cadence registers mapped to major security and privacy frameworks.
• Defined evidence expectations and review cycles while keeping the suite clearly illustrative.

• Built an automated DevSecOps workflow that detects Infrastructure-as-Code security misconfigurations, generates remediated configurations, and validates proposed fixes with Checkov before presenting results.
• Supports Terraform and Dockerfile inputs with severity classification and original-versus-remediated comparison.

Symbiosis Skills and Professional University