---
title: "Nitish Upadhyay - Principal Software Engineer - Security in Bengaluru | Tal"
description: "Meet Nitish Upadhyay, Securing Keka| CISA | CISM | 3x AWS Certified|Securing Cloud Infrastructure, Automating Security based in Bengaluru. AI stack includes claude code, cursor, and gemini."
image: "https://tal.club/meet/nitish-kumar-upadhyay/share-image"
---

# Nitish Upadhyay on Tal

## Headline

Securing Keka\| CISA \| CISM \| 3x AWS Certified\|Securing Cloud Infrastructure, Automating Security

## About

As the Cloud Security Architect at Gameskraft, I drive end\-to\-end security across cloud, infrastructure, and applications while enabling developer velocity\. My role includes securing AWS environments with strong IAM and SCP controls, integrating shift\-left security into Jenkins pipelines \(SAST, SCA, DAST, IaC, secret scanning\), deploying CSPM tools, and strengthening EKS and container security\. I lead SIEM implementation with Wazuh/OpenSearch, manage vulnerabilities via Jira with remediation playbooks, and oversee VAPT and penetration testing\. Alongside technical execution, I mentor interns, collaborate with DevOps and Product teams, and build a security\-first culture aligned with compliance frameworks like ISO27001, SOC2, and GDPR\.

## Location

Bengaluru

## AI stack

claude code

cursor

gemini

grok

kiro

langchain

## Work experience

Principal Software Engineer \- Security at Keka HR, Jul 2026 \- Present · 2 mos, Bengaluru, Spearhead Keka’s end\-to\-end security initiatives by integrating security protocols throughout the entire engineering lifecycle\. Responsible for architecting and scaling a comprehensive security program encompassing Application Security \(AppSec\), cloud infrastructure, Azure DevOps, CI/CD pipelines, API security automation, secure architectural design, security tooling, continuous monitoring, and organizational security awareness\. Collaborate cross\-functionally with engineering, DevOps, and product teams to proactively identify risks, automate security controls, fortify Keka’s overall security posture, and cultivate the development of secure\-by\-design products and platforms\.

Lead Security Engineer at Sequoia, Nov 2025 \- Jul 2026 · 9 mos, Bengaluru, • Led product security initiatives focusing on threat modeling, API security, and mobile security\. • Implemented security automation processes to enhance code review and AI security measures\. • Developed and managed IAM and WAF solutions to safeguard cloud security effectively\.

Application Specialist at Gameskraft, Jan 2025 \- Nov 2025 · 11 mos

Security Architect at Gameskraft, Jan 2025 \- Oct 2025 · 10 mos, Bengaluru, I lead cloud and application security initiatives across a highly distributed gaming platform handling petabyte\-scale traffic\. My focus is embedding security by design into every stage of the SDLC while ensuring scalability, compliance, and resilience\. • OWASP Alignment: Drove adoption of automated pipelines addressing OWASP Top 10 risks—securing APIs, preventing injection flaws, strengthening authentication/authorization, and reducing data exposure through encryption and access controls\. • STRIDE Coverage: • Spoofing / Elevation of Privilege – Enforced RBAC, IAM guardrails, and Kubernetes/EKS namespace isolation\. • Tampering / Repudiation – Built tamper\-resistant audit trails, IaC scanning, and GitHub Advanced Security for code integrity\. • Information Disclosure / DoS – Implemented secret scanning, runtime security with Wiz & Orca, and auto\-scaling to withstand denial\-of\-service scenarios\. • Security as Code: Designed automated pipelines for SAST, DAST, IaC, and container scanning with tools like Semgrep, Wiz, Orca, and GitHub Advanced Security\. • Governance & Threat Modeling: Defined security roadmaps, threat models, and compliance frameworks, aligning technical controls with both industry standards and real\-world attack scenarios\. By combining OWASP best practices, STRIDE threat modeling, and cloud\-native security automation, I help Gameskraft scale securely while protecting user trust and sensitive data\.

Enterprise Security Lead/Architect at Postman, Apr 2022 \- Mar 2025 · 3 yrs, Bengaluru, Karnataka, India, At Postman, I strengthened both application and cloud security through a blend of hands\-on testing, architectural design, and security program development\. My focus was on proactive risk reduction and measurable maturity improvements across the organization\. • Pentesting & Security Assessments: Led deep\-dive penetration tests and red\-team style assessments, identifying OWASP Top 10 vulnerabilities, misconfigurations, and supply chain risks across services\. • Maturity Scorecards: Designed and rolled out a security maturity scorecard to measure readiness across units, covering vulnerability management, secrets scanning, cloud misconfigurations, and developer adoption of secure practices\. • Threat Modeling \(STRIDE\): Embedded structured threat modeling workshops with engineering teams to address Spoofing, Tampering, Repudiation, Information Disclosure, DoS, and Elevation of Privilege at the design stage\. • AWS Cloud Security: Built a secure AWS landing zone, enforcing guardrails with IAM, VPC isolation, encryption, and continuous compliance monitoring\. • Governance & Enablement: Created practical security frameworks balancing developer velocity with risk management, ensuring teams could innovate securely without friction\.

Lead Product Manager at Postman, Mar 2022 \- Jan 2025 · 2 yrs 11 mos, Defined and enforced enterprise\-wide IAM SCPs, SSM bastions, and Control Tower guardrails, minimizing lateral movement risks\.

Cyber Security Manager at Standard Chartered Bank, Jan 2021 \- Apr 2022 · 1 yr 4 mos, Bangalore Urban, Karnataka, India, As a Specialist Cyber Security Consultant at CyberSec Solutions, my primary focus has been on securing cloud infrastructure and containerized environments with an emphasis on Terraform, Docker, and Kubernetes\. Leveraging open\-source tools such as Checkov, Gitleaks, and Terrascan, I've played a pivotal role in enhancing security postures through proactive scanning, monitoring, and automated response mechanisms\.

## Education

Post graduate, DevOps Engineering, Simplilearn Alumni

Bachelor of Technology \(B\.Tech\.\), Electrical, Electronics and Communications Engineering, jodhpur national university

[View the original profile](https://tal.club/meet/nitish-kumar-upadhyay)

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Person",
      "@id": "https://tal.club/meet/nitish-kumar-upadhyay#person",
      "name": "Nitish Upadhyay",
      "url": "https://tal.club/meet/nitish-kumar-upadhyay",
      "image": "https://tal.club/meet/nitish-kumar-upadhyay/profile-photo.jpg",
      "description": "Meet Nitish Upadhyay, Securing Keka| CISA | CISM | 3x AWS Certified|Securing Cloud Infrastructure, Automating Security based in Bengaluru. AI stack includes claude code, cursor, and gemini.",
      "jobTitle": "Principal Software Engineer - Security",
      "worksFor": {
        "@type": "Organization",
        "name": "Keka HR"
      },
      "hasOccupation": {
        "@type": "Occupation",
        "name": "Principal Software Engineer - Security"
      },
      "homeLocation": {
        "@type": "Place",
        "name": "Bengaluru"
      },
      "alumniOf": [
        {
          "@type": "EducationalOrganization",
          "name": "Simplilearn Alumni"
        },
        {
          "@type": "EducationalOrganization",
          "name": "jodhpur national university"
        }
      ],
      "knowsAbout": [
        "claude code",
        "cursor",
        "gemini",
        "grok",
        "kiro",
        "langchain"
      ],
      "mainEntityOfPage": {
        "@id": "https://tal.club/meet/nitish-kumar-upadhyay#webpage"
      }
    },
    {
      "@type": "ProfilePage",
      "@id": "https://tal.club/meet/nitish-kumar-upadhyay#webpage",
      "url": "https://tal.club/meet/nitish-kumar-upadhyay",
      "name": "Nitish Upadhyay on Tal",
      "description": "Meet Nitish Upadhyay, Securing Keka| CISA | CISM | 3x AWS Certified|Securing Cloud Infrastructure, Automating Security based in Bengaluru. AI stack includes claude code, cursor, and gemini.",
      "dateModified": "2026-08-04T16:51:06.657Z",
      "isPartOf": {
        "@id": "https://tal.club/#website"
      },
      "mainEntity": {
        "@id": "https://tal.club/meet/nitish-kumar-upadhyay#person"
      },
      "primaryImageOfPage": {
        "@type": "ImageObject",
        "url": "https://tal.club/meet/nitish-kumar-upadhyay/profile-photo.jpg",
        "contentUrl": "https://tal.club/meet/nitish-kumar-upadhyay/profile-photo.jpg",
        "caption": "Nitish Upadhyay profile photo on Tal"
      },
      "inLanguage": "en-IN"
    }
  ]
}
```