Yuveer Chetraj

Experience

• 

  Old Mutual South Africa

  Jan 2022 - now

  DevSecOps Engineer and Threat Analyst

  I helped with the integration and design of critical security tools, including SonarQube, Nexus IQ Lifecycle, Artifactory, and Prisma Cloud (SCA, SAST, secret scanning, IAC security scanning, runetime defender for hosts, EKS clusters, and ECS clusters, and CI/CD security scanning), seamlessly incorporating them into each stage of the Software Development Life Cycle (SDLC). This strategic initiative established robust secure development standards, significantly enhancing the security posture of our software development process.Documented guides on how to implement security tools.Addressed complex security tool issues that emerged during the SDLC, employing in-depth troubleshooting and problem-solving skills to ensure a streamlined and secure development process, which in turn boosted the efficiency and security of software production.Partnered effectively with the Cyber Security Operations (Cyber Soc) team to actively monitor and respond to security incidents.Identified potential security threats proactively and mitigated them by implementing robust security measures. Gained proficiency in working with a variety of cybersecurity tools and platforms including Microsoft Defender forOffice 365, Microsoft Cloud Apps, Sentinel, AWS Guard duty, Risk IQ, PhishER. As a threat analyst, I utilized these tools to monitor for potential threats and respond accordingly.Responded to and investigated threat alerts. This involved detailed analysis of potential threats and swift action tomitigate any risks.Collaborated with development teams to implement secure coding practices and perform code reviews for securityvulnerabilitiesProvided security training and awareness sessions to development teams, promoting secure coding practices andsecurity mindset.Cultivated a culture of continuous improvement within the DevSecOps environment, fostering innovation andchampioning the adoption of best security practices. Show less