Open to opportunities

GURU NARAYANA PRASAD User

@gurunarayanaprasadus

Message

Product Security Engineer specializing in DevSecOps application and product security with SAST/DAST and SBOM.

India

Message

What I'm looking for

I’m looking for a security role where I can drive product and application security across the SSDLC—using SAST/DAST/SCA, SBOMs, and cloud/compliance controls—while partnering with developers on remediation through risk-based findings and secure design reviews.

I’m a Product Security Engineer with 7 years of experience in Application and Product Security, Cloud Security, specializing in SAST/DAST/SCA, SBOM management, Premarket Security Analysis, SSDLC, Vulnerability Management, API security, web application security, and network security. I bring strong hands-on expertise with Checkmarx, Black Duck, Azure DevSecOps, Qualys VMDR, and secure design reviews.

In my roles, I’ve led enterprise risk reduction by automating vulnerability workflows (Qualys VMDR/TruRisk with ServiceNow) to reduce MTTR, and I’ve secured multi-cloud environments (AWS/Azure) using Qualys Total Cloud and Policy Compliance against CIS Benchmarks. I’ve integrated Checkmarx into Azure DevOps CI/CD pipelines from scratch, performed DAST across web/API/network environments, authored risk documentation aligned with QMS and FDA cybersecurity requirements, and supported remediation through re-testing and validation.

Experience

Work history, roles, and key accomplishments

Cyber Security Analyst

ODCET Technology

Apr 2018 - May 2021 (3 years 1 month)

Conducted OWASP-based application security assessments across authentication, authorization, cryptography, session management, and business logic. Performed SAST with Checkmarx and DAST for web applications and REST/SOAP APIs using Burp Suite, OWASP ZAP, and IBM AppScan, and produced remediation-focused security reports.

OWASP Security Assessments SAST Checkmarx DAST Web Application Security REST APIs Burp suite OWASP ZAP IBM AppScan Vulnerability Remediation

Product Security Engineer

Beckman Coulter Inc

Product Security Engineer at Beckman Coulter Inc (Bangalore); specific responsibilities were not provided.

Sr Software Engineer

Sebone Technologies Pvt Ltd

Performed premarket application and product security assessments using SAST/DAST/SCA and supported secure design reviews and secure coding guidance. Integrated Checkmarx into Azure DevOps CI/CD pipelines, maintained SBOMs, and supported penetration testing, vulnerability management, and Windows hardening aligned to CIS/DISA STIGs.

SAST DAST SCA Checkmarx Black Duck SBOMs Threat Modeling Security Design Reviews QMS Azure DevOps CI CD Security Integration Secure Coding Vulnerability Management Nessus Patch Management Security Hardening CIS Benchmarks DISA STIGs

Cyber Security Specialist

Gunvatta Kendrak Solutions

Handled vulnerability management using Qualys tooling and automated remediation workflows via ServiceNow. Conducted cloud compliance auditing and DAST/penetration testing, including manual validation of scan findings.