Vaibhav Agrawal

DevOps Engineer

United States12 yrs 3 mos experience

Most Likely To SwitchAI Enabled

Key Highlights

Led security for Google's Fitbit division.
Expert in securing IoT devices and AI agents.
Active contributor to the global security community.

Stackforce AI infers this person is a Cyber Security expert with extensive experience in IoT and application security.

Contact

Skills

Core Skills

Cyber SecurityApplication SecuritySoftware Development

Other Skills

Mobile SecurityAI SecurityIoT SecurityVulnerability AssessmentPenetration Testing (VAPT)ComplianceCore JavaJSFSpringHibernateJavaScriptSecurity TrainingOWASPInformation SecurityWeb Application Security

About

Cyber Security lead safeguarding critical digital assets through security architecture, design reviews and driving security testing initiatives across an ecosystem with a billion app downloads. Currently leading security for Google's Fitbit division including its AI Health coach. I have also led the security of Google's Smart Home and Developer ecosystem. My skillsets span to broad areas of security and privacy. From securing IoT smart devices to securing AI Agents, Web, Mobile, Cloud and Infrastructure security. Beyond my corporate role, I am a dedicated contributor to the security community, as a volunteer, mentor, as an open source contributor and a speaker at different international security conferences including ACM, BSides, SVCC, CISSE. Security research - https://scholar.google.com/citations?user=NyrE5rcAAAAJ Open Source projects - https://github.com/In3tinct Blog - https://medium.com/@in3tinct

Experience

Google

Senior Security Engineer

Jul 2021 – Present · 4 yrs 9 mos · On-site

Securing critical business assets through security architecture, design reviews, security testing and automation.
Currently leading security for Fitbit ecosystem, including Fitbit Health AI coach, Mobile apps and services.
Also, led the security for Google Home and developer ecosystem. Interconnected IoT devices and services security.

Mobile SecurityAI SecurityCyber SecurityApplication Security

Coupa software

3 roles

Senior Security Engineer

Promoted

Jan 2021 – Jul 2021 · 6 mos

Roles and responsibilities included but not limited to
Application Security -
Manual and Automated Application Security Assessment.
Managing Bug Bounty program, Triaging and Validating the security findings.
Penetration test report validation.
Security architecture, design, code reviews.
Security Engineering/Operations/Architecture -
Automating different Security Operation Tasks.
Setting up and Managing Infrastructure security tool in a Cloud Environment. Hosts And Container Scanning.
Setting up and Maintaining Host Intrusion Detection System OSSEC/Wazuh.
Maintaining Cloud security tools for continuous monitoring of Cloud environment.
Writing CHEF Recipes for infrastructure automation.
Compliance -
Generating evidence for FedRAMP and getting FedRAMP certified.
Collecting SOC2 evidence.

Vulnerability AssessmentPenetration Testing (VAPT)Application SecurityCyber Security

Security Engineer

Promoted

Mar 2020 – Jan 2021 · 10 mos

Vulnerability AssessmentPenetration Testing (VAPT)Application Security

Associate Security Engineer

Mar 2018 – Mar 2020 · 2 yrs

Vulnerability AssessmentPenetration Testing (VAPT)Application Security

Servicenow

Application Security Intern

Jun 2017 – Nov 2017 · 5 mos · Santa Clara, CA

Vulnerability AssessmentPenetration Testing (VAPT)Application Security

Cognizant

Software Security Engineer

Apr 2014 – May 2015 · 1 yr 1 mo · Pune District · On-site

Lead developer for Enterprise Security Authentication, Authorization and Access Controls at global banking platforms, directing the implementation of security protection mechanisms for banking applications. Ensuring robust defense-in-depth and regulatory compliance across international financial systems.

Capgemini india pvt. ltd.

Software Engineer

Mar 2011 – Apr 2014 · 3 yrs 1 mo · Pune/Pimpri-Chinchwad Area

Client: SCOR
Project: Omega2
Enterprise application for a global reinsurance company based on MVC architecture. A Reengineering project from Power builder to Java technologies. Developed around 20 screens/web pages, writing services, controllers and data access objects.
Debugging the legacy stored procedures and fixing it with the current implementations.
Technologies and tools: Core Java, JSF, Spring, Hibernate, Javascript, Sybase.