Arun Govindasamy — Director of Engineering

I am a results-driven technical security leader with over 17 years of experience in cybersecurity, specializing in application security, cloud security, offensive security, and secure software development. I have successfully led security initiatives across large-scale cloud environments, product security, and red teaming exercises, collaborating closely with engineering leaders, and executive leadership to embed security within the SDLC. My expertise lies in driving security strategy, building scalable security programs, and developing security tooling that empowers both business and engineering teams. Key achievements: • Revamped the SDLC by embedding security design, threat modeling, and automated security checks, reducing vulnerabilities and accelerating secure releases. • Developed security tools that eliminate false positives and business exception bottlenecks, allowing seamless exception handling without compromising security. • Designed and implemented secure authentication, profile, and payment services, ensuring privacy, compliance, and data protection. • Built a secure file-sharing and password management application, providing a centralized and scalable solution for handling sensitive data securely. • Simulated sophisticated OTP flooding attacks, exposing limitations in the existing Bot Manager. This led to a strategic shift toward CAPTCHA-based mitigations, significantly reducing the attack surface. • Conducted a live ransomware attack demonstration for executive leadership, highlighting critical security gaps and accelerating the adoption of firewall and email security controls. • Designed and executed a Vulnerability Assessment & Penetration Testing (VAPT) program, providing quantitative security insights to senior management and engineering teams. • Created and launched a Capture The Flag (CTF) platform, elevating security awareness and secure coding practices across engineering teams. • Developed a Security Champions Program, identifying and mentoring engineers across different teams to advocate for security best practices and embed security into development workflows. • Organized hands-on red teaming and security training, fostering a security-first mindset across the organization.

Stackforce AI infers this person is a cybersecurity expert specializing in application and cloud security within enterprise environments.

Location: Bengaluru, Karnataka, India

Experience: 17 yrs 10 mos