Harpreet Dhiman

DevOps Manager

Bengaluru, Karnataka, India14 yrs 3 mos experience

Highly Stable

Key Highlights

Over 14 years of Cyber Security experience.
Expert in bridging security and engineering for product development.
Certified in multiple security frameworks and tools.

Stackforce AI infers this person is a Cybersecurity expert with extensive experience in secure product development and DevSecOps.

Contact

hpdhiman@gmail.com LinkedIn

Skills

Core Skills

Product SecuritySecurity EngineeringDevsecopsApplication SecuritySecurity ConsultingCybersecurityEndpoint Security

Other Skills

Security TestingRisk ManagementCybersecurity Risk AssessmentSecurity AutomationVulnerability ManagementVulnerability ScanningWeb Application SecurityInformation Security ManagementSecurity Information and Event Management (SIEM)Cisco NetworkingFirewallsConsultingMicrosoft AzureCybersecurity ToolsSCA

About

I have over 14 years of Cyber Security experience, specializing in Secure Design Review, Threat Modeling, Product Security, DevSecOps, Cloud Security, and Application Security.Currently working as a Staff Engineer at Beckman Coulter (Danaher). On a daily basis, I bridge the gap between Security and Engineering to enable secure product development.I've managed security programs for multiple products and major clients across Financial Services, Oil & Gas, and Commercial sectors. Previously, I led DevSecOps at Hitachi and delivered security solutions for top US clients at Deloitte.Certified in CCSP, AZ-500, CEH, and CCNA.

Experience

Beckman coulter diagnostics

Staff Engineer - Security

Sep 2023 – Present · 2 yrs 7 mos · Bengaluru, Karnataka, India · On-site

Conduct secure design reviews via Threat Modeling and end-to-end security testing prior to product releases.
Implement & integrate new security tools, manage SBOMs & SOUPs, and track 3rd party component vulnerabilities.
Develop remediation plans for open vulnerabilities, collaborate with cross-functional teams, and developers to ensure secure software development practices are followed.
Prepare Product Security roadmaps including Risk Management, Software Patch Records, Cybersecurity Risk Assessment, and Penetration Test Reports, and respond to the vendor security questionnaire.
Provide training to developers on the security context of vulnerabilities requiring code changes.
Manage vulnerability prioritization, internal and external penetration testing, and perform security analysis of Post-Market Investigations (PMI) for customer complaints.

Product SecuritySecurity TestingSecurity Engineering

Hitachi vantara

DevSecOps Engineer

Mar 2021 – Sep 2023 · 2 yrs 6 mos · Hyderabad, Telangana, India · Remote

Implementing DevSecOps processes in CI/CD pipelines.
Security Automation through Jenkins, Plugins, APIs and GitHub actions.
SCA, SAST, DAST, Vulnerability Management, Container & Infrastructure Security.
Security Champions discussions, Security Gating, Release dashboards, Go-To-Market planning.
Security baselines, Threat Modeling, SonarQube scans etc.

Application SecurityDevSecOps