Summary
Overview
Work History
Education
Skills
Certification
Accomplishments
Timeline
Generic

Shahanas Najeeb

Lead Information Security Engineer

Summary

Results oriented Cybersecurity professional with 8+ years of experience specializing in cloud cryptography, Enterprise Security operations, and regulatory compliance. Proven track record in data-at-rest encryption, incident detection, response, documentation, and root cause analysis, working closely with Security Operations Centers (SOCs) and cross-functional teams. Known for being collaborative, detail-oriented, and highly adaptable, with a continuous drive to learn and implement emerging technologies in the security landscape.

Overview

11
11
years of professional experience
1
1
Certification

Work History

Lead Information Security Engineer – Critical Security Infrastructure

Wells Fargo
Concord, California
01.2024 - Current
  • Implemented and maintained data-at-rest encryption across cloud, databases, and file systems, ensuring regulatory compliance and minimizing data exposure risks.
  • Led enterprise integration of Thales CipherTrust (CCKM, CTE, KMIP, CAKM) for BYOK across AWS, Azure, and GCP, enhancing cloud encryption governance and control.
  • Conducted log analysis and threat investigations using Splunk SIEM, accelerating incident detection and improving response accuracy.
  • Performed root cause analysis and led incident remediation efforts, reducing security incident response time by 30% through process optimization.
  • Deployed and supported Salesforce Shield, strengthening Salesforce data protection within critical CRM environments.
  • Managed audit, compliance, and business continuity (BCP) activities, ensuring regulatory alignment and successful audit outcomes with zero major findings.
  • Automated recurring security and operational tasks using Python, Bash, and PowerShell, increasing team efficiency and reducing manual effort.
  • Built and maintained Splunk dashboards for real-time monitoring of key management systems and encryption health metrics.
  • Conducted vulnerability assessments to identify potential risks within the organization's infrastructure.
  • Ensured data integrity through regular audits and monitoring, enabling swift issue resolution.
  • Implemented multi-factor authentication processes for enhanced access control and user management.
  • Performed risk assessments on new projects, ensuring security measures were integrated from inception through deployment.
  • Planned and oversaw configuration changes for security infrastructure platforms.
  • Evaluated emerging technologies, staying current on industry best practices and trends in information security.
  • Mentored junior team members, fostering a collaborative environment that encouraged professional growth and knowledge sharing.
  • Developed security metrics and technical analysis to give insight into performance and trends.

Senior Information Security Engineer – Data at Rest Encryption

Wells Fargo
Concord, CA
01.2022 - 01.2024
  • Led enterprise-wide data-at-rest encryption projects at Wells Fargo, ensuring alignment with regulatory requirements (e.g., PCI DSS, ISO 27001) and internal security standards.
  • Translated business requirements into actionable technical specifications for encryption solution design and deployment.
  • Partnered with cross-functional stakeholders, including business units, engineering, and security teams—to define project scope and deliverables.
  • Performed impact and risk analyses to evaluate technical feasibility and operational risks associated with encryption implementations.
  • Defined encryption standards and key management processes, working closely with development and infrastructure teams to enforce data protection protocols.
  • Troubleshot and resolved complex encryption-related issues, collaborating with platform teams and external vendors (e.g., Thales) to ensure timely resolution.
  • Acted as a subject matter expert (SME) on data security and encryption best practices, promoting consistent policy adherence across teams.
  • Created and delivered training sessions and documentation to educate technical teams and stakeholders on encryption tools, policies, and compliance requirements.
  • Improved incident response time by creating and implementing an effective incident management process.
  • Developed customized security solutions based on client requirements that effectively addressed their unique challenges while staying within budget constraints.
  • Enhanced employee awareness of information security best practices through regular training sessions and workshops.
  • Created standardized incident response program to outline immediate and consistent remediation of security breaches.

Senior Technical Business Consultant – Cloud Encryption

Wells Fargo
San Francisco, California
01.2019 - 01.2022
  • Led enterprise-wide data-at-rest encryption projects at Wells Fargo, ensuring alignment with regulatory requirements (e.g., PCI DSS, ISO 27001) and internal security standards.
  • Translated business requirements into actionable technical specifications for encryption solution design and deployment.
  • Partnered with cross-functional stakeholders, including business units, engineering, and security teams—to define project scope and deliverables.
  • Performed impact and risk analyses to evaluate technical feasibility and operational risks associated with encryption implementations.
  • Defined encryption standards and key management processes, working closely with development and infrastructure teams to enforce data protection protocols.
  • Troubleshot and resolved complex encryption-related issues, collaborating with platform teams and external vendors (e.g., Thales) to ensure timely resolution.
  • Acted as a subject matter expert (SME) on data security and encryption best practices, promoting consistent policy adherence across teams.
  • Created and delivered training sessions and documentation to educate technical teams and stakeholders on encryption tools, policies, and compliance requirements.

Salesforce Administrator & Business Analyst Program

JVS
San Francisco, California
01.2017 - 01.2018
  • Designed data models and developed a Job Search application on the Salesforce platform, enhancing user interaction and data organization.
  • Built a School Management application in Salesforce to streamline academic record-keeping and administrative workflows.

Data Analyst Associate

Robert Half
01.2017 - 2017
  • Automated data analysis and logging processes, improving efficiency and reducing manual effort in recurring reporting tasks.
  • Enhanced business efficiency by identifying trends and patterns in complex datasets.

Software Quality Assurance Engineer

QBurst Technologies
01.2015 - 01.2016
  • Collaborated with cross-functional teams to define test strategies based on functional and technical requirements.
  • Created detailed test plans and test cases, ensuring robust validation of software functionality and performance.
  • Conducted both manual and automated testing, including regression, usability, and security tests.
  • Identified and tracked software defects using tools like JIRA and worked closely with developers to resolve issues.
  • Implemented and maintained test automation frameworks using tools like Selenium and Postman, accelerating test cycles.
  • Participated in Agile ceremonies (sprint planning, stand-ups, reviews) to ensure delivery of high-quality releases.
  • Recommended and implemented improvements to QA processes and tools, contributing to better test coverage and faster releases.

Education

Master of Science - Cybersecurity

NYU Tandon School of Engineering
New York, NY
01-2024

Bachelor of Technology - Information technology

Rajagiri School of Engineering
Kerala, India
2015

Skills

  • Cloud Platforms: Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), Salesforce (including Salesforce Shield)

  • Security & Compliance Frameworks: NIST, HIPAA, CIS Controls, PCI DSS, ISO/IEC 27001

  • Security Monitoring & Incident Response: CrowdStrike SIEM, Splunk, Salesforce Security Tools, Log Analysis, Threat Detection & Response

  • Encryption & Data Protection: Information Security Engineering, Cloud Key Management (BYOK), Cryptography, Tokenization, Encryption Protocols and Algorithms, Thales CipherTrust (CCKM, CAKM/KMIP, CTE)

  • Opentext Voltage SecureData

  • Networking & Infrastructure: TCP/IP, VPNs, Firewall Configuration, Unix/Linux Systems Administration

  • Scripting & Automation: Bash, PowerShell, Python

  • DevOps & CI/CD: Jenkins, Travis CI, Git (Version Control)

  • Collaboration & Project Management: JIRA, Confluence, SharePoint, TestRail, Zephyr

Certification

CISSP, CCSK, CSX-P, GSEC, GISP, AZ-900, ISTQB, NSA CAE Cyber Defense Certified, Salesforce Certified - Administrator, App Builder

Accomplishments


Cloud Encryption Optimization : Increased encryption deployment efficiency by 25%.

Incident Response Efficiency :

Reduced incident response time by 30% through process optimization.

Audit Compliance Excellence: Achieved zero audit findings consistently over 3 years.

Security Task Automation : Automated 50% of recurring security tasks, enhancing productivity.

Timeline

Lead Information Security Engineer – Critical Security Infrastructure

Wells Fargo
01.2024 - Current

Senior Information Security Engineer – Data at Rest Encryption

Wells Fargo
01.2022 - 01.2024

Senior Technical Business Consultant – Cloud Encryption

Wells Fargo
01.2019 - 01.2022

Salesforce Administrator & Business Analyst Program

JVS
01.2017 - 01.2018

Data Analyst Associate

Robert Half
01.2017 - 2017

Software Quality Assurance Engineer

QBurst Technologies
01.2015 - 01.2016

Master of Science - Cybersecurity

NYU Tandon School of Engineering

Bachelor of Technology - Information technology

Rajagiri School of Engineering
Shahanas NajeebLead Information Security Engineer
Resume profile built at Zety.com