Pranay Shah

Product Manager

Bengaluru, Karnataka, India11 yrs 4 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

11+ years in security with a focus on VAPT.
Expert in Supply Chain Security solutions.
Strong technical and product leadership background.

Stackforce AI infers this person is a seasoned security professional specializing in SaaS security solutions.

Contact

Skills

Core Skills

Supply Chain SecurityVulnerability ManagementDevsecops

Other Skills

Bug Bounty ProgramBurp SuiteCI/CD pipeline securityCertified Ethical HackerDockerFortifyGCPJavaKali LinuxKubernetesLeadershipMobile SecurityNessusNetwork TestingNmap

About

I am a seasoned security professional with 11+ years of experience across VAPT, vulnerability management, security tooling, and supply chain security. Currently, I serve as a Staff Product Manager at Harness, where I focus on building Supply Chain Security solutions that safeguard software from code to deployment. With a strong foundation in both technical and product leadership, I am passionate about advancing secure software practices and helping teams build with confidence.

Experience

Harness

2 roles

Staff Product Manager

Aug 2024 – Present · 1 yr 7 mos

Supply Chain SecurityVulnerability ManagementThreat ModelingDevSecOps

Staff Product Security Engineer

Aug 2021 – Aug 2024 · 3 yrs

Enhanced CI/CD pipeline security through seamless integration of security tools, fostering stronger development practices and enabling shift left security. Leveraged GCP and Kubernetes to further bolster pipeline security.
Implemented security scanners as integral components of PR checks.
Pioneered the automation of monitoring alerts for secrets and Vulnerabilities, enhancing overall security measures.
Adeptly hardened Docker images while meticulously maintaining base images for optimized security protocols and FIPS enablement.
Integral in shaping secure architecture decisions and conducting comprehensive threat modeling workshops, strengthening risk assessment.
Enhanced software supply chain security by attentively attesting images, generating SBOM (Software Bill of Materials), SLSA compliance and vigorously enforcing compliance with established policies.
Proven expertise in Vulnerability assessment, Penetration testing, and manual Vulnerability analysis.
Drove the training initiatives within the Product Security domain, offering hands-on experience with various tools to new team members.
Managed and led the Bug Bounty Program

CI/CD pipeline securitysecurity tools integrationGCPKubernetessecurity scannersmonitoring alerts+7

Sap labs india

Product Security Engineer Specialist

Jul 2017 – Aug 2021 · 4 yrs 1 mo · Bangalore Urban, Karnataka, India

Larsen & toubro infotech ltd.

Security Analyst

Nov 2014 – Jul 2017 · 2 yrs 8 mos · Bengaluru Area, India

My Responsibilites include
Performing Vulnerability Assessment and Penetration testing for Web Applications
Performing Security Testing for Mobile Applications(Android & iOS)
Performing Source Code Review
Imparting Security testing training to the new recruits
Preparing RFP’s for projects
Compiling reports based on standards as per the client
Providing recommendation and fixes for the Vulnerabilities reported.