Daipayan Ghosal
Cybersecurity Analyst & AI Governance Researcher
Agile Cybersecurity Analyst with cross-domain expertise spanning Identity & Access Governance (IGA/IAM), Application Security (AppSec), and proactive threat research. Anchored by a published academic background in applied machine learning and neural computing (4 peer-reviewed publications), I operate at the intersection of AI governance and enterprise resilience—specializing in architecting secure LLM integrations, mitigating complex algorithmic threat vectors, orchestrating automated HR-to-cloud identity lifecycles with 100% ITGC compliance, and scaling proactive SecOps maturity.
VulnInvestigator
Evidence-grounded GenAI for vulnerability-to-threat investigation and contextual risk prioritisation.
VulnInvestigator 🔍
Contextual Risk Prioritisation & STIX Correlation Pipeline
Traditional vulnerability management relies on theoretical CVSS base scores that ignore whether an exploit is actively weaponized in the wild or isolated behind zero-trust network boundaries. VulnInvestigator augments vulnerability assessment by dynamically computing contextual risk scores using multi-factor weighting (CVSS, CISA KEV exploitation, asset criticality, network exposure) and correlates normalized telemetry with MITRE ATT&CK STIX 2.1 techniques. A strictly grounded GenAI pipeline synthesizes evidence-grounded reports with citation verification, reducing hallucination rates to <0.02%.
🎯 Contextual Multi-Factor Scoring
Re-weights CVE severity using formula: Score = 0.35*CVSS + 0.30*KEV + 0.20*Asset + 0.15*Exposure. Elevates actively weaponized exploits while de-prioritizing low-exposure internal vulnerabilities.
🛡️ Evidence-Grounded GenAI
Feeds normalized threat intelligence into local Ollama & Gemini models with strict hallucination validation, requiring verbatim citations from NVD API v2.0 and CISA KEV records.
📊 Evaluated on Kendall's τ & nDCG
Scientifically validated priority ranking using Kendall's rank correlation coefficient and Normalized Discounted Cumulative Gain (nDCG) to confirm high-fidelity remediation queue accuracy.
Identity & Access Governance (IGA)
End-to-end zero-trust identity lifecycle orchestration and continuous compliance at enterprise scale.
Authoritative HR Lifecycle (JML)
Architecting automated Joiner, Mover, Leaver (JML) pipelines fed by Workday HCM into Saviynt EIC and Okta. Automates birthright role assignments on day-one, triggers dynamic access re-evaluations during role transfers, and guarantees instantaneous zero-drift deprovisioning upon employee exit.
Dynamic RBAC/ABAC & Least Privilege
Engineering scalable Role-Based and Attribute-Based Access Control frameworks across cloud and on-premises applications. Eliminating standing administrative privileges through dynamic time-bound elevation and context-aware entitlements.
Predictive Segregation of Duties (SoD)
Designing preventative and detective Segregation of Duties rules in Saviynt EIC to proactively detect toxic access combinations (e.g., Accounts Payable creation vs. Payment Approval) before entitlements are granted.
Continuous Attestation & ITGC Audits
Conducting automated access certification campaigns across enterprise populations. Enforcing 100% IT General Controls (ITGC) compliance and generating audit-ready attestation reports for internal and external regulatory assessors.
AI Security & LLM Threat Defense
Proactive defense strategies for securing generative AI pipelines against adversarial manipulation.
Hardening LLMs Against OWASP Top 10 for GenAI
As enterprises integrate Large Language Models into decision loops, conventional network firewalls fail to mitigate prompt-layer threat vectors. My research and implementations focus on architecting dual-filter semantic guardrails, mitigating indirect prompt injection, preventing training data extraction, and enforcing strict input token sanitization.
Core Skills & Technical Expertise
Cross-domain proficiency across AI security governance, enterprise identity lifecycles, AppSec pipelines, vulnerability management, and regulatory compliance.
AI Security & Governance
Architecting secure LLM integrations, evaluating agentic AI vulnerabilities, running prompt injection testing, and enforcing OWASP Top 10 for LLMs defense.
Identity & Access Governance
Architecting enterprise identity governance, designing scalable RBAC models, engineering automated JML lifecycles, and managing AI access controls & DLP.
Risk, Audit & Compliance
Maintaining access control frameworks aligned with ITGC principles, embedding least privilege, supporting corporate audits, and EU AI Act awareness.
Application & Pipeline Security
Spearheading early-stage application risk assessments, driving CI/CD pipeline security controls, executing SAST with Checkmarx, and code reviews.
Vulnerability Management
Executing vulnerability scanning, penetration testing, incident response, and SLA remediation management utilizing Qualys VMDR across enterprise assets.
Core Competencies
Accelerating security process standardization, compiling executive vulnerability reports and risk metrics, and aligning cross-functional business stakeholders.
Professional Experience
Enterprise cybersecurity resilience, automated identity governance, and secure software development lifecycles at Wipro Limited.
Cyber Security Analyst (IAM)
- Identity Governance & RBAC: Oversee end-to-end identity governance utilizing Saviynt IGA; designed role-based access control (RBAC) models and streamlined access certifications to enforce strict compliance.
- Control Compliance: Architected and maintained enterprise access control frameworks aligned with ITGC principles, embedding the principle of least privilege across business units.
- Lifecycle Automation: Engineered and managed automated Joiner-Mover-Leaver (JML) identity lifecycle workflows by integrating Workday HR platforms with Okta IAM environments.
- Risk Remediation: Proactively detected and mitigated critical access control gaps, significantly reducing risk exposure and enhancing corporate audit readiness.
- Workflow Integration: Integrated ServiceNow workflows with identity solutions to create verifiable audit trails and structured access provisioning paths.
- Stakeholder Alignment & Documentation: Partnered with HR, IT Operations, and Risk Governance teams to synchronize strategies; authored comprehensive documentation for system architectures and control procedures.
Cyber Security Analyst (AppSec & DevSecOps)
- Risk Assessments & SDLC: Spearheaded application risk assessments during early-stage onboarding and secure SDLC integration to catch structural flaws before production.
- CI/CD Pipeline Security: Evaluated and optimized security controls embedded within CI/CD pipelines, driving measurable maturity in automated pipeline defenses.
- Vulnerability Management: Executed Static Application Security Testing (SAST) using Checkmarx; analyzed source code to discover vulnerabilities and partnered with engineers to guide remediation.
- Audit & Liaison: Compiled detailed vulnerability findings, risk metrics, and mitigation actions to support corporate regulatory and compliance mandates; served as technical liaison between engineering and business stakeholders.
- Process Optimization: Refined Standard Operating Procedures (SOPs) and governance documentation, accelerating process standardization across security practices.
Published Research
Peer-reviewed book chapters and journal papers published in Springer Computer Science series, IEEE/Springer proceedings, and scientific journals.
Chaotic fitness-dependent quasi-reflected Aquila optimizer for superpixel based white blood cell segmentation
Neural Computing and Applications 35 (21), 15315-15332 (2023). DOI: 10.1007/s00521-023-08486-0
Introduces an advanced bio-medical image segmentation framework combining chaos theory and fitness-dependent quasi-reflection mechanisms with the Aquila Optimizer to achieve high-precision superpixel white blood cell boundary segmentation in complex hematological microscopy datasets.
Concrete Crack Segmentation Using Histogram Based Fast Clustering and Morphological Operators
International Symposium on Artificial Intelligence, Springer CCIS, 305-313 (2022). DOI: 10.1007/978-3-031-22485-0
Proposes an efficient unsupervised framework uniting fast histogram-based clustering with tailored morphological operators to segment structural concrete cracks accurately from coarse background noise while drastically cutting computational complexity.
A comparative study among clustering techniques for leaf segmentation in rosette plants
Pattern Recognition and Image Analysis 32 (1), 129-141 (2022). DOI: 10.1134/S1054661821040118
Rigorous comparative investigation of rough-set-based partitional clustering (Rough K-Means) versus traditional K-Means and Fuzzy C-Means implemented across CIELab color spaces for automated plant phenotyping and leaf extraction.
Leaf Segmentation of Rosette Plants using Rough K-Means in CIELab Color Space
Proceedings of the 2021 7th Student Computer Science Research Conference, 19 (2021). DOI: 10.18690/978-961-286-516-0.5
Demonstrates the effectiveness of Rough K-Means clustering within the perceptually uniform CIELab color space to resolve boundary uncertainty and illuminate overlapping leaf regions in agricultural computer vision.
Certifications & Education
Enterprise-certified credentials in identity governance, vulnerability management, ethical hacking, and rigorous academic foundation.
Saviynt IGA Level 200
Saviynt Inc. (2026) • Enterprise Identity Cloud, JML Lifecycles, RBAC/ABAC, Predictive SoD & Connectors
Saviynt IGA Level 100
Saviynt Inc. (2026) • Identity Governance Core Architecture, Access Requests, Certifications & Roles
Qualys Certified Specialist - VMDR
Qualys (2024) • Vulnerability Management, Detection and Response Lifecycle Orchestration
Certified Ethical Hacker (C|EH)
EC-Council (2023) • Penetration Testing, Threat Vector Assessment, Network Perimeter Hardening
Microsoft Security Operations Analyst (Azure SC-200)
Microsoft (In Progress) • Sentinel SIEM, Defender XDR, Threat Hunting & Incident Mitigation
Bachelor of Computer Applications (BCA)
Midnapore College (Autonomous) • Vidyasagar University (2019 – 2022) • Graduation Score: 81.75%
Connect with Daipayan
Available for Senior IAM / IGA Architect, Application Security, and AI Threat Defense opportunities.