Krishnaveni Palanivelu
Professional Qualifications
Cloud Architecture & Delivery
Strong knowledge of cloud delivery, security, and deployment models across IaaS, PaaS, and SaaS.
Deep experience conducting architectural risk assessments, cloud/high-risk exception reviews, and coordinating firm-wide cloud security initiatives.
Expertise in executing Information Security directives aligned with enterprise data security policies.
Cloud Platforms & Services
Hands-on knowledge of AWS, PCF, and OCI cloud platforms.
Proficient in AWS core services: EC2, VPC, ELB, Route 53, S3, CloudWatch, CloudTrail, and more.
Strong understanding of AWS security services:
IAM, KMS, AWS WAF, GuardDuty, Secrets Manager, etc.
Engineering & Operational Excellence
Agile Software Development, Scrum, DevOps, and SRE best practices.
Expertise in Incident, Change, Release, Configuration Management, and Root Cause Analysis (RCA).
Security Architecture & Strategy
Secure Systems Architecture & Strategy
Defense-in-Depth Secure Architecture
Cyber Security Risk Management Framework
Enterprise Security Controls
Regulatory & Compliance Frameworks
Experienced in multiple international standards and regulatory frameworks including:
NIST
SP 800-30, 800-39, 800-40, 800-53, 800-61
SP 800-92, 800-122, 800-144, 800-145, 800-146, 500-292
ISO Standards
ISO 12207, 15408, 17788, 17789, 19086, 19941
ISO 20000, 22301
ISO 27001, 27002, 27017, 27018, 27034, 27036, 27037, 27043
ISO 31000
Additional Compliance
FIPS, ITIL, HIPAA, COBIT, SOX, PCI DSS
Identity & Access Management
Deep experience in IAM programs, governance, and secure access models
Threats, Vulnerabilities & Threat Modeling
Strong understanding of modern threats and vulnerabilities.
Hands-on exposure to industry-standard threat modeling methodologies:
STRIDE, PASTA, MITRE ATT&CK, Attack Trees, and tooling across AWS, Azure, and GCP environments.
Data Protection & Application Security
Data Loss Prevention (DLP)
DevOps Security
Compute / Storage / Kubernetes
SAST & DAST concepts and tools
Security Infrastructure & Defensive Technologies
DDoS Mitigation
Web Application Firewalls (WAF)
Intrusion Detection/Prevention Systems (IDS/IPS)
Network Segmentation
SIEM Platforms
Deceptive Technologies
Threat & Vulnerability Management Solutions