Nov 2023 – Present · 2 yrs 4 mos · India

May 2023 – Present · 2 yrs 10 mos · India

Sep 2019 – Apr 2023 · 3 yrs 7 mos · India

Oct 2014 – Sep 2019 · 4 yrs 11 mos · Pune, India

• Leading a global team of Architects, Senior Engineers/Ethical Hackers and Program Managers to ensure adoption of ‘Design for Security’ framework at scale across the organization
• Responsible for designing security in 100+ products every year across Eaton’s Electrical, Vehicle and Aerospace Divisions
• Full ownership of all cybersecurity deliverables throughout product lifecycle including
• o Threat Modeling and Risk Assessment for all new product development
• o In-depth Vulnerability Assessment and Penetration Testing using state-of-the-art commercial and open source tools (IBMAppscan, BurpSuite, MobSF, Nessus, IDAPro, Achilles, Peach Fuzzer, Defensics, Protecode, Coverity)
• o Defining legal contracts for supply chain and secure installations
• o Rolling out enterprise cybersecurity solutions for secure product lifecycle management (source code analysis, code signing, 3rd party library analysis)
• Managing incident response for swift resolution while collaborating with external agencies like ICS – CERT and interfacing with multiple internal teams
• Bootstrapping research collaboration with leading academic institutions in US and India (CMU, RIT, VJTI)
• Working with external cybersecurity certification agencies towards product and process certification
• Acting as the voice of Eaton on cybersecurity matters in industrial, academic and government bodies

Jan 2012 – Sep 2014 · 2 yrs 8 mos

Jan 2009 – Dec 2011 · 2 yrs 11 mos

• As a research scholar (part of ABB – Cambridge University research collaboration), I worked closely with multiple teams spread across Norway, Sweden, Switzerland and India towards design and implementation of security protocols for substation communication. Key contributions include:
• Identifying as impractical, an existing technical specification (IEC 62351-6) for securing substation communication and proposing an implementable alternative
• Designing cryptographic key management protocols for substations taking into account a holistic picture of the threats involved
• Designing cryptographic protocols to manage the remote off-switch as mandated on all smart meters to be installed in UK
• Providing ‘Security Economics’ perspectives to security of industrial automation and control system, smart metering and security certification schemes

Sep 2006 – Dec 2008 · 2 yrs 3 mos · Bangalore

• Part of the team that designed and developed new UI for Cisco’s Unified Contact Center Express (UCCX) product on custom MVC platform using Java, JavaScript, JSP and AJAX
• Manual, automation and load testing of multiple call management features of UCCX
• Received excellence award for solving 50% outstanding customer cases and reducing outstanding bug count by 30% in 3 months