◆ Live
CLOUD · SECURITY · DEVSECOPS · AWS · 

click to replay

Open to work

Amar
Shindhe

Cloud Security Engineer

3.5+ years securing cloud infrastructure, pipelines, and applications across healthcare tech.

AWS DevSecOps WAF SIEM Pen Testing
GitHub LinkedIn Contact
About

Building security that scales — from pipelines to production, from code to cloud.

3.5+ Years in Cloud &
Application Security
200+ Vulnerable CI/CD
Plugins Mitigated
25pp AWS Security Posture
Improvement (53→78%)
30% Operational Cost
Reduction via Automation
Experience
Mekari
Senior DevSecOps Engineer  ·  Central Jakarta, Indonesia  ·  Hybrid
Aug 2025 — Present
DevSecOps End-to-end pipeline
security from scratch
K8sSec Kubernetes security
architecture built
CloudSec Cloud security
posture established
  • Establishing DevSecOps from ground up — integrating security gates across all CI/CD pipelines.
  • Building and owning Kubernetes security architecture: RBAC, network policies, runtime threat detection.
  • Designing cloud security posture management across multi-service AWS infrastructure.
  • Defining security standards, tooling, and processes to mature the engineering org's security culture.
Halodoc
Security Engineer (I → II)  ·  Bengaluru, India  ·  Hybrid
Feb 2023 — Aug 2025  ·  2 yrs 7 mos
200+ Vulnerable plugins
found & fixed in CI/CD
53→78% AWS security posture
via CIS benchmarks
30% Cost saved through
access automation
Security Engineer IIJan 2025 – Aug 2025 · 8 mos
Security Engineer IJun 2023 – Dec 2024 · 1 yr 7 mos
Security Engineer InternFeb 2023 – May 2023 · 4 mos
  • Deployed OpenSearch SIEM integrating multi-source logs with custom detection use cases.
  • Designed and automated WAF rules preventing DDoS and fraud incidents — zero production impact.
  • Built vulnerability management pipeline: DefectDojo + Trivy + Semgrep + SonarQube + detect-secrets.
  • Automated PII detection and masking using PIICatcher across low-privileged environments.
  • Responded to major incidents (DDoS, OTP fraud) — Athena log analysis, WAF tuning, rate limiting.
  • Mentored junior engineers and led hiring & knowledge-sharing to scale security awareness.
Publications
Read Publication
Automated PII Detection and Response in Slack Channels
Halodoc Engineering Blog  ·  Nov 24, 2023
Covers the implementation of Slack PII Monitoring at Halodoc — flowchart design, detection methods, incident handling procedures, and its impact on creating a secure digital workspace.
Data Privacy · Security Engineering
Read Publication
Automatic Monitoring of Sensitive and Confidential Information in Slack
CDEF Bulletin 2nd Edition  ·  Sep 1, 2023
Featured in the Cyber Defense Indonesia (CDEF) Bulletin — explores automated monitoring of sensitive data in Slack environments, contributing to the cybersecurity community's knowledge base.
Cybersecurity · PII Monitoring
Read Publication
Peer to Peer Decentralized Ride-Sharing using Blockchain Technology
Journal of Emerging Technologies and Innovative Research  ·  Oct 17, 2023
Research paper on utilizing blockchain technology for peer-to-peer ride-sharing platforms, focusing on decentralization, smart contracts, and transparency to enhance trust and security among participants.
Blockchain · Decentralization · Research
Arsenal
Cloud & Container Security
AWS IAMAmazon EKS KubernetesK8s WAFGuardDuty Security HubInspector Shield AdvancedProwler KubescapeCloud Computing
DevSecOps & CI/CD
GitHub ActionsContinuous Integration TrivySemgrep Gitleaksdetect-secrets DefectDojoSonarQube CheckovDependency-Check SSDLCSecurity Development Lifecycle
Application Security
Application SecuritySecurity Best Practices Burp SuiteOWASP ZAP NucleiCodeQL SQLiXSS IDORSSRF SQLPynt
Threat & Incident Response
SIEMIncident Handling Web Application FirewallsDDoS Mitigation Security ResearchInformation Security Analysis OpenSearchCloudWatch NetworkingSOCRadar
Mobile & SAST
MobSFFrida DrozerObjection ApkToolADB SnykCheckmarx
Productivity & Ops
Google WorkspaceDatadog New RelicJira ConfluencePython BashTerraform
Certifications
Certified AppSec Practitioner (CAP)
SecOps Group
✓ Earned
AWS Certified Cloud Practitioner
Amazon Web Services
✓ Earned
Multi-Cloud Red Team Analyst
CyberWarfare Labs
✓ Earned
Certified AI/ML Pentester
SecOps Group
✓ Earned
AWS Certified Security – Specialty
Amazon Web Services
In Progress
Certified Cloud Security Professional (CCSP)
(ISC)²
In Progress
Education
B.E. Computer Science & Engineering
The National Institute of Engineering, Mysuru
2019 – 2023  ·  Networks · Cyber Security · DSA · OS · DBMS
9.2 CGPA
Pre University Course, Science
JSS RSH PU College, Dharwad
Jun 2017 – Apr 2019
92.17 %
Contact

Let's build something
more secure together.

Email
[email protected]
LinkedIn
linkedin.com/in/amarshindhe
WhatsApp
+91 87927 17669
GitHub
github.com/amrshindhe