Jan 2022 – Jul 2022 · 6 mos

• Creating a security roadmap for the company and driving projects to closure
• Defining data security standards and policies to protect organizations from data breaches, information theft and cyber attacks
• Establishing Secure SDLC process in the organization and guide the engineering teams towards Secure Architecture
• Building security team & mentoring team members to achieve the security goals of the company
• Building Security Automation Charter in the company and driving the projects
• Building and mentoring team of Product Security Engineers to achieve the security goals of the company
• Understanding the Scope of Data Security, IT Security, App Security, AWS Security and N/W Security of the company, analyze the present status and drive it towards the required ideal security standards
• Constantly evaluating and auditing business needs and improvising the security posture of the company by discussing with engineering leaders

Dec 2019 – Mar 2022 · 2 yrs 3 mos

• Evaluate the product & technical specification requirements and define security requirements during the design, development and implementation phase of applications
• Conducting Threat Modelling and Risk Assessment on a product solution and new business verticals to identify the risks and gaps
• Performing penetration testing of Web Applications, Mobile Applications, Cloud Infrastructure and Web Services
• Identifying and securing the perimeter of the attack surface from attacker’s point of view by analyzing real time attacks and setting out solutions to mitigate such.
• Strengthening cloud security posture by identifying & fixing misconfigurations, enabling security controls, automating and auditing security best practices
• Strengthening IT Security by hardening g-suite security controls, email servers, employee exit procedures etc.
• Defining and running Digital Risk Protection strategies such as Brand Monitoring, External Attack Surface Monitoring and Data leaks
• Building security automation in CI/CD pipelines
• Managing stakeholders across Engineering, Product, DevOps, and Executive teams to align security initiatives with development goals
• Identifying & mitigating frauds in the business flows and regulating zero days and security exploitations

Apr 2018 – Dec 2019 · 1 yr 8 mos

• OLA Cabs:
• Responsibilities:
• Evaluate the product & technical specification requirements and define security requirements
• during design, development and implementation phase of applications
• Identifying security issues in web applications, web services and mobile applications and drive them
• to closure
• Conducting Threat Modeling and Risk Assessment on a product solution
• Performing Secure Code Review on projects and identifying the vulnerabilities
• Establish a Secure SDLC process in the organization and guide the developmental team towards
• Secure Architecture
• Onboarding and training/mentoring new members for the organization for application security
• FoodPanda:
• Responsibilities:
• As a newly acquired company, the following challenges and responsibilities were present:
• Perform Threat analysis on the whole tech of FoodPanda to understand the risks associated with the
• existing Tech
• Implement SDLC in further development on the existing code
• Understand and Identify the risks & vulnerabilities associated with the new Business vertical and act
• upon them to fix issues with thriving business needs
• Identifying and securing the perimeter of the attack surface from the Attackers PoV
• Educating developers on Secure Coding Practices in turn building secure SDLC
• Understand the Scope of Data Security, IT Security, App Security, AWS Security and N/W Security of
• the company, analyze the present status and drive it towards the required ideal security standards
• considering business needs

Apr 2017 – Mar 2018 · 11 mos

• Identifying security issues in web applications, web services and mobile applications and drive them
• Performing Secure Code Review on projects and identifying the vulnerabilities
• Onboarding and training/mentoring new members for the organization for application security

Jun 2015 – Apr 2017 · 1 yr 10 mos · Bangalore

• Vulnerability Researcher

Aug 2014 – May 2015 · 9 mos · Bangalore

• Responsibilities:
• Conduct independent Vulnerability assessment, Penetration Testing of Web, Mobile, Thick Client
• applications and network infrastructure
• Prepare effort estimation and understand the client requirements
• Conduct calls, walkthroughs and follow up with clients and development teams
• Configure and fine-tune the automated tool for assessment
• Report the findings with POC and recommend solutions for the same
• Secure Code review of projects and secure development of modules for digital asset management