Sandeep’s Portfolio - sandeep kumar sahoo

Experienced Cyber Security Specialist Securing Your Future with Advanced Cyber Defense

I’m Sandeep Kumar Sahoo, a Cyber Security Specialist With 6+ Years of Experience in The Field

Strong expertise in WAF, Network Security, VAPT, DevSecOps, SOC operations and Vulnerability remediation. Skilled in implementing security controls, Performing Risk Assessments and driving secure SDLC improvements. Certified Ethical Hacker (CEH) with hands-on proficiency in SAST, DAST, API security testing, Security Governance, Risk and Compliance (GRC) processes.

Download Resume

Sandeep Kumar sahoo

Email

ksandeepsahoo@gmail.com

Phone

+91 9337214820

Time Zone

India Standard Time (GMT+5:30)

Education

Master of Business Administration (IT)

2022 – 2025

Indira Gandhi National Open University (IGNOU)

Bachelor of Technology

2016 – 2020/21

GITA Autonomous College

Experience

Senior Executive – Information Security Specialist

Asian Paints Limited, Mumbai, India | Nov 2024 – Present

-> Implement and manage F5 WAF (Distributed Cloud), performing on-boarding, policy tuning, SSL certificate renewal and issue resolution. Strengthen application security by enabling advanced WAF features, performing configuration updates and conducting periodic security reviews.
-> Lead VAPT activities for critical applications, analyze findings and collaborate with development teams to drive timely remediation. Performed SAST/ DAST scans, upgrade SAST/DAST/SSC/SCA platforms (Fortify) & support troubleshooting of SAST/DAST platform issues.
-> Manage A10 Load Balancer and PaloAlto Firewalls for application on-boarding, rule updates and cleanup of outdated configurations. Monitor SOC alerts, investigate security incidents and apply mitigation steps to reduce risk exposure across enterprise systems.

Executive – Information Security Analyst

Softenger India Pvt. Ltd., Pune, India | Aug 2022 – Oct 2024

-> Configured and deployed WAF (Imperva, F5 BigIP), IPS (Cisco, Checkpoint, PaloAlto) & Firewall Analyzer (AlgoSec, Tufin) solutions, ensuring secure architecture for large-scale applications. Performed end-to-end security reviews to maintain confidentiality, integrity, and availability of sensitive enterprise systems.
-> Led security integration for high impact projects, designing automated and cost efficient security controls from ground up. Conducted in-depth application security assessments, identifying vulnerabilities prior to release and minimizing production risk.
-> Monitored enterprise network for threats, analyzed logs and prevented multiple security incidents through proactive defense measures.

Cybersecurity Projects

Remote | Aug 2021 – Jul 2022

-> Performed manual penetration testing and provided vulnerability remediation guidance for multiple client environments. Conducted SIEM-based threat analysis, reviewed logs and mitigated high-risk alerts in real-time.
-> Assessed GRC-related risks, evaluated process gaps, and recommended improvements to enhance policy compliance. Monitored vulnerability disclosures, analyzed their impact and advised mitigation steps to reduce organizational risk.
-> Implemented firewall changes, investigated anomalous activities and improved network security posture.

Security Analyst
Mitigater Techsecure Pvt. Ltd., Odisha, India | Jul 2020 – Jul 2021
-> Performed network penetration tests, application assessments and risk reviews, reducing critical production vulnerabilities. Conducted security audits, analyzed malicious traffic and implemented preventive actions to secure enterprise networks.
-> Trained junior analysts in access management, incident response and daily security operations. Developed and reviewed security system policies, baselines, and incident response guidelines. Supported vulnerability management, incident reporting, and continuous monitoring for client infrastructures.