Vedant Kale

Background

About Vedant Kale

I got into cybersecurity out of equal parts curiosity and responsibility—curiosity for how systems really work (and break), and responsibility to make them resilient. I began hands‑on in India, then earned my M.S. in Cyber Forensics & Security (GPA 4.0) in Chicago. Since then, I’ve grown into a Security Engineer who blends penetration testing, SOC operations, detection engineering, and GRC to reduce real‑world risk with measurable results. I build secure systems and programs that scale. Offensively, I’ve led targeted pentests and adversary‑style exercises, audited code, and delivered reproducible PoCs that help engineers fix root causes—not symptoms. On the governance side, I’ve run enterprise‑wide risk assessments, streamlined audit readiness, and maintained policy/metrics frameworks aligned to ISO 27001/27701, NIST CSF/800‑53, PCI, SOX, HIPAA, GDPR, and GLBA. I enjoy translating complex security topics into clear actions so teams can ship faster and safer. Defensively, I’ve engineered high‑fidelity detections, tuned SIEM workflows, and hardened configurations operationalizing playbooks and KPIs to identify breaches, accelerate response, and prevent repeat incidents. Selected impact Cut MTTD/MTTR by 40% and reduced exploitable paths by 45% via automated detections and tighter alert triage. Closed 65% ISMS compliance gaps and shortened audit cycles by 30% through disciplined GRC lifecycle management. Improved posture by 35% with threat modeling (STRIDE/ATT & CK), strong TLS, least‑privilege tokens, and hardening. Reduced vendor risk ~25% via structured third‑party reviews, SBOM/control validation, and enforceable remediation. Strengthened API integrity by 75% and lowered network breach attempts by 55% through focused testing and sprints. Top skills Penetration Testing - Detection Engineering - SOC Operations - GRC & Risk Management - Secure Architecture - Blue Team Keywords/tools NIST CSF/800‑53, ISO 27001/27701, PCI, SOX, HIPAA, GDPR, GLBA; risk lifecycle; third‑party risk; audit readiness; KPIs/KRIs; incident response; EDR/MDR/XDR;vulnerability management (Nessus, Qualys); hardening; Burp, Metasploit, SQLmap, Nmap, Wireshark; IDA/Ghidra (fundamentals); Sentinel; Git/Jenkins/Terraform; ServiceNow/Archer; AWS; Python/Bash. I’m excited about roles where I can lead SOC Operations, run targeted offensive testing, build automated detections, and partner with engineering to deliver secure, resilient systems at scale.