I am a security architect and IT Application Security Manager with more than 16 years of experience across software engineering, infrastructure, and cybersecurity, focused on mission-critical payment systems.
I began my career as a software developer in Chennai in 2010 and progressed through software architecture and infrastructure into information security. Today, I serve as IT Application Security Manager at Novalnet AG in Munich, where I am responsible for the security of a large-scale payment platform.
Because I have built and operated these systems myself, I understand the real constraints that development and operations teams face. This allows me to work with them on security requirements that are practical to implement and sustainable to maintain, rather than controls that exist only on paper.
My work spans the full security lifecycle: embedding security into the SDLC, threat modelling, security architecture reviews, secure coding standards, vulnerability management, and risk-based control design. Since 2018, I have held accountability for PCI DSS Level 1 compliance across the payment ecosystem and for SOC 2 Type II certification.
Alongside application security, I design secure, highly available infrastructure, covering network segmentation, load balancing and reverse proxy architecture, Linux platform hardening, disaster recovery, and business continuity, for environments where downtime directly affects customers and revenue.
Core areas of expertise:
Enterprise Security Architecture · Application Security & Secure SDLC · Payment Security & PCI DSS · SOC 2 Compliance · Threat Modelling & Risk Assessment · Secure Network & Infrastructure Design · High Availability & Disaster Recovery · Cloud Security · DevSecOps & Security Automation · Security Governance
I value mentoring engineers and building strong working relationships between development, operations, and compliance teams, because I believe lasting security comes from shared ownership.
I am open to senior leadership opportunities in security architecture and cybersecurity, including Enterprise Security Architect, Head of Security, and CISO roles.