Headline

Senior Security Engineer at Diligent

About

Diligent leverages my 4+ years of expertise as an Application Security Engineer to strengthen its application security landscape. I actively perform vulnerability assessments, thread modeling using STRIDE, and risk reviews to ensure robust product security. My hands-on experience with tools such as Burp Suite, MobSF, and Postman allows me to retest penetration testing reports effectively. Collaborating with developers, I oversee application onboarding, manage SAST/SCA using tools like Snyk, GHAS, and CodeQL, and drive secure code validation and remediation. With over 9 years in cybersecurity roles, I bring a focused approach to threat and vulnerability management, cloud migration, and firewall compliance. In my previous role at Amadeus Labs, I contributed to internal audits and threat management documentation, while at Cognizant, I integrated static source code analysis into CI/CD pipelines and automated reporting solutions. My mission is to enable secure development practices and foster collaboration to mitigate risks and enhance security frameworks.

Location

Bengaluru

AI stack

anthropic apis

deepseek

gemini

github copilot

Work experience

Senior Product Security Engineer at Diligent, Dec 2022 - Present · 3 yrs 10 mos, Bengaluru, ▪ Responsible for performing Vulnerability assessment and scanning for the product I owned. ▪ Responsible for performing thread modeling using STRIDE and performing risk review based on Metrix. ▪ Hand on experience in retesting penetration testing reports of web and mobile from hackerOne/Synack using tools such as Burp suite, MobSf, Postman, etc. ▪ Work closely with developer for application onboarding and performing SAST/SCA of app using SNYK,GHAS,CodeQL ▪ Track developer’s code for Vulnerabilities and drive secure code validation & remediation by interacting with the different teams as per criticality. ▪ Familiar with ticketing tools like Jira and working with repository services like Bitbucket for downloading and scanning codes and integrating them with CICD Pipeline. ▪ Experience in handling internal and external pentests and vulnerability risk review. ▪ Engaged with customer to better understand their needs and deliver excellence service. ▪ Assessed AI/ML applications for risks such as prompt injection and data leakage ▪ Developed AI security checklists and best practices ▪ Guided teams on secure AI integration into products ▪ Improved awareness of AI-specific threats and mitigation techniques ▪ Performed adversarial testing on an open-source LLM using Garak to identify vulnerabilities in model alignment." ▪ Built a prototype Retrieval-Augmented Generation (RAG) system with integrated PII filtering and vector database encryption

Senior Security Engineer at Amadeus Labs, Mar 2021 - Nov 2022 · 1 yr 9 mos, Bengaluru, Karnataka, India, ▪ Carrying out regular internal audits and follow up until the organization standards are met. ▪ Producing and submitting a full audit report on each audit undertaken ▪ Producing audit summary reports for each audit undertaken ▪ Responsible for maintaining appropriate documentation that defines the Threat & Vulnerability Management Program to manage the TVM Team to develop and update as appropriate. ▪ Worked on migration all server in Cloud. ▪Worked on FIM (Checking all Server are running fine or not, if not then need to connect with the technology owner and gets update) ▪Worked on firewall Compliance.

Security Associate at Cognizant, Nov 2018 - Feb 2021 · 2 yrs 4 mos, Bangalore, • Integrated static source code analysis in Jenkins CI/CD pipeline which helped to secure end to end development process. • Engineered an automated reporting solution which generated the excel or any type of report based on customizations and sent periodically as an email attachment post prediction. • Performed Open source security Vulnerability analysis of source code using security tools- CheckMarx,Appscan Sourceand White source APIs to record and update the vulnerability score associated with open source and third-party libraries in the project management platform.

Application Security Associate at Accenture, Oct 2015 - Oct 2018 · 3 yrs 1 mo, Bengaluru Area, India, • Perform vulnerability assessment for web as well as thick client applications • Conduct testing based on OWASP standards • Performed API testing using Postman and Burp Suite • Perform Internal and External Dynamic Application Security Testing (DAST) on client network • Performed incident response activities for malware and various other security incidents • Providing proper recommendations and end to end security solutions • Perform research and explore new exploit scenarios for identifying vulnerabilities • Worked on various Spam mail investigations and analyze them for threats including phishing, spoofing, whaling and abuse attacks