Open to opportunities

ap prakash

@apprakash

Message

Hands-on product security leader for AI, cloud, and DevSecOps risk reduction.

India

Message

What I'm looking for

I’m looking to lead hands-on product and AI security strategy—building secure SDLC pipelines, improving vulnerability governance, and aligning engineering teams around measurable risk reduction and audit-ready controls.

I’m a product security & AI security leader with nearly 8 years of experience securing SaaS and cloud environments across product, application, cloud, DevSecOps, vulnerability governance, and compliance. I combine security architecture, engineering execution, and program leadership with AI-assisted development and automation for security readiness.

In my current role as Head of Security (AI & Security Operations), I own product, platform, cloud, and AI security strategy—leading Secure SDLC, AppSec/DevSecOps integration, and exposure management. I’ve driven measurable outcomes including Prisma Cloud CNAPP/CWPP/CSPM rollout with GitHub Advanced Security governance, cutting validation cycles by 35%, reducing AI-driven vulnerability false positives by 30%, and improving audit outcomes by 20% year-over-year.

Experience

Work history, roles, and key accomplishments

Current

Head of Security - AI Ops

Current

Strobes Security

Jan 2025 - Present (1 year 6 months)

Owned product, platform, cloud, and AI security strategy across AppSec, DevSecOps, exposure management, and governance/compliance initiatives. Led Prisma Cloud and GitHub Advanced Security governance rollout, and built CI/CD security validation and AI-assisted vulnerability triage to reduce risk closure time and false positives.

Security Consultant & Manager

Strobes Security

Jan 2021 - Dec 2024 (3 years 11 months)

Managed application security, cloud security, DevSecOps, and remediation governance for enterprise SaaS clients while staying hands-on in testing and design reviews. Implemented secure SDLC pipelines (SAST/DAST/SCA and automated compliance) and led threat modeling, IAM hardening, and CSPM initiatives across AWS and Azure.

AppSec Cloud Security DevSecOps Remediation Governance Secure SDLC SAST DAST SCA Threat Modeling Red Teaming IAM Hardening CSPM AWS Security Azure Security

Security Analyst

WeSecureApp

Jun 2019 - Jan 2021 (1 year 7 months)

Performed penetration tests across web, API, network, cloud, and Active Directory, converting findings into remediation plans for engineering and IT teams. Automated vulnerability validation with Python and supported phishing simulations and security posture assessments.

Penetration Testing Web Security API Security Network Security Cloud Security Active Directory Security Code Review Automation (Python OWASP Security Assessments Claude Agent SDK LangGraph Agentic AI Security AI Governance Security Automation

Cybersecurity Researcher

HackerOne

Jun 2018 - Jan 2019 (7 months)

Conducted independent bug bounty research with responsible disclosure for SaaS platforms across web, API, and cloud. Reported vulnerabilities and applied offensive security and vulnerability analysis practices aligned to common security frameworks.

Bug Bounty Responsible Disclosure Offensive Security Vulnerability Analysis Web Security API Security Cloud Security ISO 27001 NIST Policy Enforcement Audit Readiness

Education

Degrees, certifications, and relevant coursework

Jawaharlal Nehru Technological University, Hyderabad

Bachelor of Technology (B.Tech), Computer Science

2015 - 2019

Completed a B.Tech in Computer Science at JNTUH (2015–2019), building foundations relevant to product, application, cloud, DevSecOps, AI security, and vulnerability governance.