Résumé.

Product security, vulnerability management, supply chain protection, and security automation.

• Architected SoS, a vulnerability management and security posture platform used across Harness and acquired companies.
• Built security scanning and governance workflows across CI pipelines.
• Developed AI assisted triage and automation for vulnerability and pentest reports.

DevSecOps, software supply chain security, cloud security, and incident response.

• Maintained security scanning across Kong software repositories.
• Established release provenance and container signing controls.
• Coordinated pentest findings and incident response.

Security infrastructure and cloud posture across build and runtime environments.

• Implemented just in time access with Teleport.
• Established runtime protections for static analyzers.
• Built vulnerability scanning and cloud security tooling.

Application and cloud security with automated testing in the delivery pipeline.

• Built SAST and DAST pipeline coverage.
• Automated bug bounty triage and researcher communication.

Security assessments and public technical research.

• Conducted web and network penetration tests.
• Performed AWS and GCP security audits.
• Published research and presented at security conferences.