SHAHNAWAZ SIDDIQUI
CyberSecurity Maven
Summary
Committed to leveraging deep technical expertise and strategic vision to lead enterprise cybersecurity programs that strengthen resilience, reduce risk, and drive measurable business impact. I specialize in application security, API security, DevSecOps, and cybersecurity program leadership, embedding security by design across development lifecycles and ensuring compliance with regulatory and privacy standards. In addition, I bring extensive experience in enterprise software development, building scalable and high-performance applications, leading cross-functional development teams, and managing complex software projects from design through delivery, ensuring alignment with business goals and technical excellence
Overview
19
19
years of professional experience
7
7
Certifications
Work History
Principal - Security, Risk & Mgt
Verizon Wireless
01.2023 - Current
- Serve as Security Maven leading Cybersecurity Risk Management and Governance across enterprise, owning security posture and risk remediation strategies for 250+ critical applications.
- Spearheaded Security Automation to deliver real-time, actionable insights to executive leadership, transforming raw vulnerability data into strategic metrics that drive decision-making and resource allocation.
- Build Security Ticket Automation Engine for vulnerability tracking and SLA enforcement, Auto Closures issue based on latest report, update ticket with right info ,hence reducing remediation time by 40%
- Act as technical lead for Cybersecurity KPI Portal as consolidating data from multiple security tools (42Crunch, Sysdig, Tenable) into unified risk dashboards and comprehensive governance reports
- Built a Generative AI Accelerator for the 42Crunch platform, automating Swagger/OpenAPI specification generation to streamline application onboarding and reduce API security friction.
- Deployed SLM models to process and summarize complex security telemetry. Transformed raw data into actionable security insights and trend analysis, empowering executive leadership with rapid decision-making capabilities.
- Delivered real-time executive dashboards with data-driven insights into application risk posture, vulnerability trends, and compliance health metrics, achieving 35% reduction in high-severity vulnerabilities
- Spearheaded DevOps to DevSecOps transformation, integrating security tools (SAST, DAST, OSS scanning) across development lifecycle with comprehensive governance frameworks
- Designed and implemented SOX automation solutions using UIPath for operational excellence, enhancing audit efficiency and achieving 100% compliance readiness
- Led enterprise-wide CCPA compliance implementation within Data Security category, automating Do Not Sell and Opt-Out processes with Transcend integration
MTS-IV Consultant Systems Engineer
Verizon Wireless
10.2017 - 12.2022
- Spearheaded OnDevice Portal microservices migration serving millions of users for device activation including smartphones, eSIM, and IoT vehicles, achieving 30% reduction in activation time
- Led RPS Portal design for Apple Watch activation with complex customer journeys (port-ins, E911, protection plans), enabling 12,000+ monthly activations
- Received 2021 CIO Recognition Award for exceptional technical leadership and innovation in Apple Watch activation platform
- Served as Module Lead for Digital NSA Migration from Oracle Commerce to Spring Boot microservices (BYOD, Cart Service, Connected Car modules)
- Designed and implemented 5G Home self-service platform using Akka actor model for availability checking and installation scheduling
- Orchestrated API architecture for SOE, PEGA, and CXP layers with GraphQL integration for optimized data layer performance
- Established Kibana and Grafana monitoring dashboards for real-time metrics, achieving 99.9% platform uptime
ATG Consultant
Trans American Information Systems Inc. (Verizon Client)
04.2014 - 10.2017
- Designed and implemented headless architecture with ATG REST-based web services for reusable e-commerce components serving 175 million monthly visitors
- Deployed Secure Payment Portal restricting payment information vocalization and mandating authenticated self-service entry for AutoPay and equipment orders
- Led Cart Redesign exposing complex discount structures, monthly dues, trade-in values, and New Verizon Plan features including data carryover and safety modes
- Orchestrated Red Venture partnership integration accelerating sales through personalized landing pages and seamless telesales/e-commerce integration
- Implemented Unlimited Plans with HD streaming, mobile hotspot, and device-based pricing structure incentivizing paperless billing and AutoPay
- Developed API simulator and logger with offline response caching, improving testing efficiency by 50%
- Integrated Camunda Rule Engine and Endeca for product recommendations, dynamic business rules, and personalized experiences
Software Engineering Team Lead
Accenture
01.2011 - 03.2014
- Led development of MTN Group's customer-facing e-commerce platform from scratch for South Africa-based multinational mobile telecommunications company. Built comprehensive online shop enabling customers to purchase compatible bundled products (devices, accessories, plans) with RICA registration compliance, loyalty program integration, and upgrade eligibility management.
- Led cross-functional team building enterprise e-commerce platform from ground-up using ATG Commerce 10.1.2, serving MTN's African and Middle Eastern markets
- Designed and implemented MTN product catalog architecture supporting complex bundled products with compatibility validation ensuring customers select appropriate device, accessory, and plan combinations
- Developed comprehensive shopping cart and checkout system with RICA registration integration complying with South African telecommunications law
- Implemented product comparison tool enabling customers to compare complex product bundles with PDF export capability for informed purchase decisions
- Built MTN Loyalty program integration with points accrual system (postpaid wholesale charge summaries, prepaid cash ingress) and redemption for airtime, SMS bundles, data bundles, and phone packages
- Designed MTN Upgrade eligibility system with automated contract generation, terms and conditions management, and email notification workflow
- Architected custom web services invocation framework accelerating development velocity and enabling rapid integration with MTN inventory and payment systems
- Integrated PayGate payment gateway, implemented One-Time Password authentication module, and customized ATG commerce and fulfillment pipelines
- Implemented product overview personalization, promotion engine for shopping cart discounts, and composite repository for efficient data management
- Customized ATG Customer Service Center (CSC) UI using SVC Repository framework, adding custom tabs for enhanced customer support capabilities
- Led design reviews, code reviews, and mentored team members on ATG technical architecture and e-commerce best practices
- Key Technologies: ATG Commerce 10.1.2, Oracle 10g, JBoss 5.1, Java/J2EE, Web Services, PayGate Integration
Associate Technology Level 2
Sapient Pvt. Ltd
06.2009 - 01.2011
- Sprint 2.0 E-Commerce re-platforming using ATG Commerce 9.0, Phone & Media module development, personalization features
Software Engineer
Yodlee InfoTech Pvt. Ltd
05.2008 - 02.2009
- Yodlee Money Center personal finance platform, financial calendar and charts module, web services integration
Software Engineer
Modus Information System Pvt. Ltd
08.2007 - 05.2008
- Deutsche Bank GM Account Opening and TOB system, MiFID compliance, document wizard, multi-language document generation
Associate Software Engineer
Boden Software Services Pvt Ltd
07.2006 - 02.2007
- Web-based manufacturing quotes system, MVC framework implementation, dealer and supplier portal development
Education
Bachelor of Engineering - Electronics & Communication
Visvesvaraya Technological University
Bangalore, IndiaSkills
Security & Compliance: 42Crunch, Sysdig, Tenable, SAST, DAST, Container Security, API Security, Threat Modeling, CCPA, SOX, Data Governance, Vulnerability Management, Security Automation, Penetration Testing
DevSecOps & Security Tools: Security CI/CD Integration, OWASP, Snyk, Checkmarx, Fortify, Burp Suite, Nessus, Qualys, Security Scanning, Compliance Automation
Programming & Frameworks: Java 17/11/8, Spring Boot, Spring Cloud (Config, Eureka, Gateway, Hystrix), Play Framework, Akka, Nodejs, REST APIs, GraphQL, gRPC, WebSocket
Cloud & DevOps: AWS (EC2, S3, Lambda, ECS, EKS, API Gateway), Docker, Kubernetes, Helm, Jenkins, CI/CD, Terraform, Ansible
API Security & Management: Apigee, Kong, AWS API Gateway, OpenAPI/Swagger, OAuth 20, JWT, Rate Limiting, API Threat Protection, API Security Testing
Microservices & Architecture: Microservices Design Patterns, Circuit Breaker, Saga, CQRS, Event-Driven Architecture, Service Mesh, Domain-Driven Design, Secure Architecture
Monitoring & Security Analytics: ELK Stack (Elasticsearch, Logstash, Kibana), Grafana, Prometheus, Splunk, SIEM, Security Dashboards, Log Analysis, Threat Detection
Databases & Caching: Oracle, PostgreSQL, MongoDB, Cassandra, Redis, DynamoDB
Messaging & Streaming: Apache Kafka, RabbitMQ, AWS SNS/SQS, Event Sourcing, Message-Driven Architecture
Design Patterns: Circuit Breaker, Singleton, Factory, Builder, Strategy, Observer, Repository, MVC, Dependency Injection
Tools & Automation: Jira, ServiceNow, UIPath, Git, Maven, Postman, JUnit, Mockito, SonarQube
Certification
AWS Certified Solutions Architect
CORE COMPETENCIES
- Application Security & API Security (42Crunch, SAST, DAST, Tenable, Sysdig, Container Security)
- DevSecOps & Security Automation (CI/CD Security Integration, Security Testing, Vulnerability Management)
- Java & Spring Framework Development (Spring Boot, Spring Cloud, Microservices, RESTful APIs, Reactive Programming)
- Microservices Architecture & Design (API Gateway, Event-Driven, Circuit Breaker, Domain-Driven Design)
- Cybersecurity Platform Development (Security Portals, Risk Dashboards, Security Data Integration)
- Security Compliance & Governance (CCPA, SOX, Threat Modeling, Security KPIs, STOP Gating)
- Cloud-Native Development & DevOps (AWS, Docker, Kubernetes, CI/CD, Infrastructure as Code)
- Technical Leadership & Cross-functional Collaboration (Security Champions, Developer Enablement, Agile Teams)
Timeline
Principal - Security, Risk & Mgt
Verizon Wireless
01.2023 - Current
MTS-IV Consultant Systems Engineer
Verizon Wireless
10.2017 - 12.2022
ATG Consultant
Trans American Information Systems Inc. (Verizon Client)
04.2014 - 10.2017
Software Engineering Team Lead
Accenture
01.2011 - 03.2014
Associate Technology Level 2
Sapient Pvt. Ltd
06.2009 - 01.2011
Software Engineer
Yodlee InfoTech Pvt. Ltd
05.2008 - 02.2009
Software Engineer
Modus Information System Pvt. Ltd
08.2007 - 05.2008
Associate Software Engineer
Boden Software Services Pvt Ltd
07.2006 - 02.2007
Bachelor of Engineering - Electronics & Communication
Visvesvaraya Technological University