About
I write about what holds up in practice.
Hi, I'm Sudhir, a CISSP-certified security professional based in Mumbai. I work in large enterprise environments, covering security architecture, network security, vulnerability management, and governance, risk and compliance.
I help define security standards and assess whether systems meet them. When they fall short, I work with the teams responsible to address the gaps or formally accept the risk. I also support audits against standards such as CIS, ISO 27001 and PCI DSS.
Part of my work involves automating manual checks and reporting to make them repeatable.
I enjoy testing my skills in Capture the Flag competitions. Beyond cybersecurity, I like exploring new tools and figuring out how they work. Outside work, I enjoy cricket, playing chess, and reading Hindi literature.