Sadhana Natarajan

Engineering Manager

Bengaluru, Karnataka, India18 yrs 10 mos experience

AI EnabledHighly Stable

Key Highlights

18 years of experience in product development and security.
Led multiple security initiatives at Adobe and Microsoft.
Expert in cloud-native product security and vulnerability management.

Stackforce AI infers this person is a Cybersecurity and Cloud Security expert with extensive experience in product development.

Contact

sanata@uber.com LinkedIn

Skills

Core Skills

Security StrategyProduct SecurityCloud SecurityIdentity And Access ManagementSoftware DevelopmentEngineering Management

Other Skills

AI-driven workflowsAWSAgile & Waterfall MethodologiesAgile MethodologiesAgile PracticesAmazon Web Services (AWS)Application SecurityArtificial Intelligence (AI)Attention to DetailAuthenticationAutomationBackend developmentBusiness StrategyC++C/C++

About

Strategic and Adaptive Leader With 18 years of experience across product development and security, I bring a rare blend of technical depth, product intuition, and strategic leadership. I have built and scaled cloud-native products many with built-in security and privacy features. This foundation led me to drive shift-left security initiatives earlier in my journey, and I now lead shift-right efforts focused on analyzing adversary TTPs to design effective and innovative detection techniques. I also lead the Vulnerability Operations Center in India. Earlier in my journey, I championed shift-left initiatives like secure SDLC, Threat Modeling and developer enablement. Whether building products or scaling security capabilities, I lead with a growth mindset, deep empathy, and a commitment to empowering high-performing teams to thrive.

Experience

18 yrs 10 mos

Total Experience

5 yrs 5 mos

Average Tenure

2 yrs 7 mos

Current Experience

Adobe

Senior Engineering Manager

Nov 2023 – Present · 2 yrs 7 mos · Greater Bengaluru Area

At Adobe, I led three key initiatives: Offensive Security, Vulnerability Operations Center (VOC), and Dynamic Application Security Testing (DAST), driving strategy, innovation, and cross-team execution.
Shaped the offensive security strategy, driving proactive identification of vulnerabilities at scale.
Guided my team to assess the adversary tactics, techniques, and procedures(TTPs), to build situational awareness and designed innovative methods to detect advanced persistent threats(APT) and sophisticated attacks against Adobe. We identified strategic remediation approaches, identifying vulnerability patterns to eliminate security issues at the root cause.
Led my team in building a homegrown intelligence capability leveraging automation and AI-driven workflows to detect, triage, and validate vulnerabilities at scale and Integrated external exploit feeds with intelligent pipelines to strengthen Adobe’s defenses against emerging threats.
Partnered cross-functionally with Vulnerability Management, Penetration Testing, Red Team, and Threat Intelligence to build a unified model for continuous large-scale scanning and detection.
Collaborated globally to deliver cross-functional projects enhancing detection, remediation, and risk prioritization.
Led the DAST team to implement shift-left security, establishing streamlined “paved roads” for secure development.
Mentored and coached team members to grow as leaders, fostering expertise, ownership, and long-term capability building.

Offensive SecurityVulnerability Operations CenterDynamic Application Security TestingThreat IntelligenceAutomationAI-driven workflows+2

Microsoft

Senior Software Engineer

Jan 2020 – Nov 2023 · 3 yrs 10 mos · Bangalore Urban, Karnataka, India

At Microsoft, I contributed to cloud security and identity platforms, driving secure and scalable solutions. My role blended technical leadership, hands-on engineering, cross-geography collaboration, and mentoring, enabling the team to deliver high-impact projects.
First senior engineer on the India-based team, building the security engineering capability from the ground up and partnering with US, Israel leadership to scale operations.
Directed the analysis, design, and delivery of multiple product features, collaborating with security, privacy, product, and support teams to ensure secure, scalable implementations.
Established on-call processes and incident response playbooks, enabling smooth operations across global teams.
Mentored engineers to take ownership, lead tasks, and execute independently, while investigating customer incidents to reduce recurring issues.
Led the development effort to replace the authentication system with Microsoft Authentication Library (MSAL), enhancing security and enabling seamless single sign-on (SSO) across Microsoft cloud services.
Led the design and implementation of Mobile Application Management (MAM) and Mobile Device Management (MDM) integrations, overseeing analysis of identity and access scenarios, including OAuth flows, broker authentication, Intune MDM/MAM, and conditional access policies to enable secure access and protect enterprise mobile data.
Directed identity segregation initiatives across Azure tenants, implementing isolation, RBAC, and conditional access policies, while guiding teams on secure integration, cross-tenant access, and monitoring strategies for enterprise-scale environments.
Mentored junior engineers, conducted bi-weekly knowledge-sharing sessions, and embedded security best practices across the team.

Cloud SecurityIdentity PlatformsMicrosoft Authentication LibraryIncident ResponseOAuthMobile Device Management+1

Netapp

Member Technical Staff

Nov 2013 – Jan 2020 · 6 yrs 2 mos · Bangalore

At NetApp, My role combined hands-on engineering(product development) in ONTAP, Security leadership and cross-team collaboration to deliver robust, compliant solutions.
Product Security:
Led threat modeling, secure code reviews, and SDLC execution for ONTAP and cloud products built on microservices architectures, hosted on AWS and Azure, orchestrated with Kubernetes.
Proposed baseline security requirements aligned with NIST SP.800-53 for integration into product design, improving overall security posture. Conducted architectural investigations to detect hardcoded secrets and helped teams implement secure alternatives.Authored security best practices for NodeJS and web attacks, trained teams, and mentored junior engineers to drive successful project delivery.
Assisted teams in evaluating and running SAST tools to embed automated security checks.
Presented “Vaulting Cloud Secrets” at NetApp Security Conference, demonstrating secure management of cloud secrets using HashiCorp Vault with a DynamoDB backend.
ONTAP:
Designed and implemented multi-factor, certificate-based, token-based authentication for ONTAP, strengthening access security and compliance.
Delivered FIPS-compliant OpenSSH integration with LDAP SSH key support and upgraded OpenSSH from FreeBSD sources, resolving integration conflicts.
Improved platform resilience by adding functionality for out-of-quorum scenarios.
Developed MQTT-based event capture application to monitor storage workloads.
Delivered Vault-as-a-Service on ONTAP using dockerized containers orchestrated with Kubernetes. Built a programmatic application demonstrating HashiCorp Vault with Google Cloud Storage backend. Developed a blockchain-based solution to detect tampering and verify integrity in audit logs.

Threat ModelingSecure Code ReviewsSDLCAWSKubernetesMicroservices+2

Nokia siemens networks

Senior Software Engineer

Jul 2007 – Oct 2013 · 6 yrs 3 mos · Bangalore

At Nokia Siemens Networks, I grew from an individual contributor into a Scrum Master and feature lead, balancing hands-on development with mentoring, coordination, and reliability engineering. My work combined core development in C/C++, multithreading, Unix/Linux, and databases with a focus on Agile practices, reliability engineering, and continuous quality improvements.
Improved system reliability by implementing redundancy and redesigning key components to handle downtime and recover gracefully from process crashes.
Enhanced configuration management to support provisioning across multiple vendors, increasing flexibility and scalability.
Facilitated Agile delivery as Scrum Master for a 5–6 member team, conducted 5-why analysis for customer issues, and contributed to DFMEA for feature reliability.
Mentored new engineers and freshers, accelerating onboarding and strengthening technical capability within the team.
Served as Feature Group Leader and Coordinator, managing requirements, pre-analysis, and cross-team development.
Designed and enhanced the GUI to support evolving portability features and improved user workflows.
Designed and implemented features for high availability and failover in backup domains
Developed database procedures (PL/SQL stored procedures) to improve availability and resilience in MNP applications.