Headline

EX-Philips | EX-LoginSoft | Product Security Engineer | AI/ML & GenAI Security | AI Red Teaming | Threat Modeling | Penetration Testing | Cloud & Kubernetes Security | Secure SDLC| Certified Container Security Expert

About

""A security researcher passionate towards Zero-day vulnerability"" Skilled in identifying security gaps in the products and infrastructure using both offensive and defensive approaches. Currently working as a product security engineer: ◆ Intense expertise in Cloud-native security, Docker security, Kuernets security, AWS EKS security, and AWS ECS security, Proficiency with CIS benchmarks. ◆ Container Security, including a deep understanding of containerization concepts, orchestration platforms (Kubernetes), security best practices, and supervising secure container lifecycle processes ◆ Experience with Cloud Security: Demonstrated experience in securing cloud environments e.g., AWS, and familiarity with cloud-native security tools and practices ◆ Proficiency with application security tools such as Trivy, Snyk, Kubescape, Kubebench, Burp Suite, OWASP ZAP, blackduck, Fortify, and dependency management tools ◆ Strong understanding of secure coding practices, vulnerability management, and remediation techniques. Expertise with source control (Github, Bitbucket), and CI pipelines (ArgoCD, Jenkins, and Github Actions) ◆ CVE/CWE Lifecycle. Proven experience in detecting and remediating security issues within codebases, ensuring timely and effective vulnerability management ◆ Static and Dynamic Application Security Testing (SAST/DAST): Conduct thorough static and dynamic analysis of our applications to identify and remediate security vulnerabilities early in the development proces ◆ Software Composition Analysis (SCA): Implement SCA tools to identify and manage open-source components, ensuring that all third-party libraries and frameworks used in our codebase are secure and up-to-date ◆ Strong understanding of Secure design patterns and architecture, in Product & Technical Requirement Review, Architecture Review, and Coding practices ◆ Experience in establishing a Secure SDLC process in the organization and guiding the development team towards Secure Architecture as well as threat modeling with STRIDE ◆ Intense expertise in Penetration testing of Web Applications, and Web Services, Mobile Applications, and Thick clients. ◆ Experience in testing Payment gateways, Single Sign-on, and Open Authorisation protocol integrations ◆ Server load testing and APT analysis, TCP packet analysis, HTTP request analysis providing threat feed for known CVE id for proactive attack detection through SNORT signature as well with WAF rule. An active member of Bug Bounty Programs

Location

Bengaluru

AI stack

claude

codex

hermes agent

langchain

mcp

openai

Work experience

Lead AppSec Engineer at InMobi Advertising, Sep 2025 - Present · 1 yr 2 mos

Specialist-1 Product security engineer at Philips, Feb 2022 - Sep 2025 · 3 yrs 8 mos, Bengaluru, Karnataka, India, 1. Threat Reduction via Secure Design & Threat Modeling KPI: Reduced high/critical security risks in product designs by 60–80% pre-development through early-stage threat modeling and architecture reviews. Collaborated cross-functionally with development and architecture teams. Proactively identified and mitigated potential threats before implementation. Reduced remediation efforts and enhanced security posture from day one. 2. Vulnerability Detection & Resolution Efficiency KPI: Achieved a 95% vulnerability detection rate in thick/thin clients, APIs, containers, and source code using a hybrid approach (manual testing + automated tools). Delivered actionable findings through in-depth static and dynamic assessments. Cut average remediation time by 40% through prioritized reporting and developer collaboration. Integrated SAST/DAST tools in CI/CD pipelines for early detection. 3. Container & Infrastructure Security Hardening KPI: Implemented security controls in containerized environments (Docker/Kubernetes), achieving 100% compliance with CIS Benchmarks and internal hardening guidelines. Designed and enforced runtime security policies, image scanning, and secrets management. Automated compliance and baseline drift detection using tools like Kube-bench, Trivy, or custom scripts. Helped prevent container escape, privilege escalation, and misconfiguration-based threats.

Senior Security Engineer at SecurEyes, Jun 2020 - Jan 2022 · 1 yr 8 mos, New Delhi, Delhi, India

Penetration Tester at Loginsoft, Jul 2019 - Apr 2020 · 10 mos, Hyderabad, Telangana, India

Information Security Analyst at Adaptive Security, Nov 2017 - Jun 2019 · 1 yr 8 mos, New Delhi, Delhi, India