Dhawal S.

Dhawal Sarwate Security Architect | Cloud Security | Threat Modeling | CISM Strategic and hands-on Security Architect with 10+ years of experience in enterprise security architecture, cloud security, vulnerability management, and secure software development practices. Certified in CISM, with deep expertise in designing secure cloud infrastructures, performing threat modeling, and driving secure code reviews across Agile and DevOps pipelines. Adept at aligning security frameworks with business goals and regulatory requirements. Core Competencies • Cloud Security Architecture (AWS, Azure, GCP) • Threat Modeling (STRIDE, PASTA, LINDDUN) • Vulnerability Management & Remediation • Secure Code Review (SAST, DAST, Manual Review) • DevSecOps & CI/CD Pipeline Security • Application Security (OWASP Top 10, SANS 25) • Security Risk Assessment & Governance • Security Policies, Standards & Compliance (ISO 27001, NIST, SOC 2, GDPR, PIMS ISO 27701) • Identity and Access Management (IAM, Zero Trust) • Security Tooling (SIEM, EDR, WAF, CSPM) Professional Experience Security Architect | Appzlogic, Gurugram — 12/2021 – Present Clients – Multiple Clients and Engagements (MTN, Ambition Hire, Databahn, Thriwe Consulting, Sage, Mobilityware, Blockchain clients etc.) • Designed and implemented cloud-native security controls across AWS and Azure environments using CIS Benchmarks and cloud-native services. • Led threat modeling workshops for microservices-based applications, identifying risks early in the SDLC using STRIDE and attack tree analysis. • Oversaw secure code reviews using Checkmarx and manual assessments to identify and remediate OWASP Top 10 vulnerabilities. • Built vulnerability management processes integrated with CI/CD pipelines, leveraging tools like Qualys and SonarQube. • Collaborated with DevOps and engineering teams to enforce secure container configurations using Prisma Cloud. • Implemented IAM and Role-Based Access Control (RBAC) across multi-cloud environments. QA Lead - Security | Wheelseye, Gurugram — 03/2020 – 12/2021 • Executed comprehensive vulnerability scanning and patch lifecycle coordination across 500+ assets. • Performed code audits and security assessments for web and mobile applications. • Managed third-party risk assessments and security controls for SaaS integrations. • Supported SOC operations with threat intel, alert triaging, and incident response. Lead QA - Security | Pitney Bowes, Noida — Jun 2016 – Mar 2020 • Led threat modeling sessions for enterprise applications and collaborated with developers to mitigate design-level security risks. • Conducted secure code reviews for Java and .NET-based applications, ensuring adherence to OWASP and internal coding guidelines. • Participated in vulnerability assessments and coordinated with DevOps to implement fixes in CI/CD pipelines. • Supported cloud migration security efforts by designing security controls on AWS including IAM policies, encryption at rest, and secure APIs. • Worked closely with enterprise risk teams to align technical controls with ISO 27001 and GDPR compliance efforts. Senior Information Security Engineer | Snapdeal, Gurgaon — Apr 2015 – May 2016 • Worked closely with application development teams to review application security designs and threat models. • Performed manual and automated vulnerability assessments using tools like Burp Suite and OWASP ZAP. • Contributed to secure coding training sessions for engineering teams, covering OWASP Top 10 and common secure design patterns. • Developed security baselines for internal tools and third-party integrations. • Supported incident response processes and helped build alerting rules within SIEM for faster threat detection. Education Bachelor of Technology (B.Tech) in Information Technology Rajiv Gandhi Technical University, Bhopal — 2008 Certifications CISM – ISACA Tools & Technologies Cloud Security: AWS Security Hub, Azure Defender, GCP SCC Threat Modeling: MS Threat Modeling Tool, OWASP Threat Dragon Vulnerability Mgmt: Qualys, Nessus, Rapid7, OpenVAS Secure Code Review: SonarQube, Checkmarx, Fortify, Veracode DevSecOps: Jenkins, GitLab CI, Aqua Security, Snyk SIEM: Splunk, Elastic Stack, QRadar IAM: AWS IAM, Azure AD, Okta, CyberArk