Himanshu Mahajan
I own security architecture where the blast radius is the business itself: the commerce platform, the customer data behind it, and the AI systems and agents now acting on both.
About Me
My work runs the length of a request: the edge in front of the platform, the API layer behind it, the cloud it runs on, and the policy that decides which crawlers, agents and internal AI services get through. The tools are the easy part. The job is the judgement: for each exposure, what to close, what to accept, and what to retire when a control costs the customer more than it saves. I make those calls with the teams who own revenue and experience, then encode them in policy and tests, so the decision holds without anyone having to remember it.
Security Architecture
Zero-Trust implementation, multi-layered defense, enterprise security frameworks
Cloud Security
GCP, Azure, multi-cloud security, container security, CDN protection
AI Security Architecture
Trust boundaries and access models for AI systems and autonomous agents, designed so automated usage stays safe for the business and invisible to the customer
Advanced Threat Protection
Bot protection, DDoS mitigation, automated threat detection & response
Technical Expertise
Security Architecture
- Zero-Trust Implementation
- Cloud Security Architecture
- API Gateway Security
- Multi-layered Defense
- Enterprise Security Frameworks
- Security Integration
AI & Agent Security
- AI system security architecture
- Agentic usage governance
- LLM & API access control
- Secure AI adoption
- AI risk assessment
Security Platforms
- Akamai Security Cloud
- Wiz Cloud Security
- SentinelOne EDR
- Kong API Gateway
- Splunk SIEM
Cloud Platforms
- Google Cloud Platform (GCP)
- Microsoft Azure
- Multi-Cloud Security
- Container Security
- CDN Security
- Cloud Security Controls
Threat Protection & Analysis
- Advanced Bot Protection
- DDoS Mitigation
- Vulnerability Management
- Security Analytics
- Incident Response
- Nessus Vulnerability Scanner
- Wireshark Network Analysis
- Grafana Security Analytics
Identity & Access Management
- Azure AD/Entra ID
- OKTA Identity Platform
- CyberArk PAM
- Multi-Factor Authentication
- Conditional Access
- Access Governance
- JAMF Mobile Device Management
Automation & Development
- Python Security Scripting
- PowerShell Automation
- Terraform IaC
- CI/CD Security Integration
- Ansible Configuration
- BurpSuite Web App Testing
- Metasploit Framework
Professional Journey
HOME DEPOT CANADA
Security EngineerBELL MEDIA (CTV, TSN)
Cybersecurity SpecialistCANADIAN TIRE CORPORATION
IAM Analyst (Contract)CONCORDIA UNIVERSITY
IT Support SpecialistWEBWINGZ DIGITAL AGENCY
Cybersecurity Business AnalystStrategic Initiatives & Impact
Advanced Bot Protection & Multi-layered Security
Architected and deployed advanced bot protection system on Akamai platform for Home Depot Canada, one of North America's largest Fortune 50 retailers. Designed comprehensive defense-in-depth strategy integrating CDN security, API Gateway, and cloud security controls for enterprise e-commerce protection.
Enterprise Security Operations Transformation & Canada-Wide EDR Deployment
Led comprehensive security operations transformation at Bell Media, orchestrating Canada-wide SentinelOne EDR deployment across multiple broadcast facilities. Streamlined vulnerability management processes, engineered advanced security analytics platform using Grafana, and implemented custom detection rules with incident response playbooks, significantly enhancing operational efficiency and threat detection capabilities.
Enterprise IAM Transformation
Designed and implemented automated IAM framework at Canadian Tire Corporation, integrating OKTA with Active Directory and Azure Entra ID. Streamlined identity management processes across enterprise systems, reducing user provisioning time by 97%.
Professional Publications
VulnerX
Technical publication focused on advanced vulnerability research, exploit development, and security architecture. In-depth analysis of emerging cybersecurity threats and defensive strategies.
CyberCrip
Professional blog covering enterprise security solutions, IAM frameworks, and cloud security implementations. Practical insights into cybersecurity best practices and industry standards.
Education
CONCORDIA UNIVERSITY
Master of Engineering – Information Systems Security
Jan 2022 - August 2023
Montreal, Canada
Key Courses: Cloud Computing Security and Privacy, Operating Systems Security, Wireless Network Security, Foundation of Cryptography, Computer Network
MIT-WORLD PEACE UNIVERSITY
Bachelor of Technology – Computer Science Engineering
July 2017 - July 2021
Pune, India
Key Courses: Computer Network, Information Security, Database Management Systems
Certifications
CISSP
Certified Information Systems Security Professional
In Progress
Akamai Fraud Management
Akamai Security Products - Bot Manager Premier & Account Protector
Qualys Certified Specialist
Vulnerability Management Detection and Response
Let's Connect
I'm always interested in discussing new opportunities, cybersecurity challenges, and innovative solutions.