harish p - Security Engineer III - NetApp | Himalayas
harish pHP
Open to opportunities

harish p

@harishp

Dedicated Security Engineer with expertise in vulnerability management.

India
Message

What I'm looking for

I am seeking a role that fosters collaboration and innovation, allowing me to leverage my security expertise while contributing to a culture of continuous improvement and learning.

I am a highly skilled Security Engineer with nearly five years of experience in vulnerability management and implementing automated security solutions. My expertise spans across Multi-Cloud Security Posture Management, Secure Software Development Life Cycle, and mitigating vulnerabilities with a shift-left mindset. I have successfully reported vulnerabilities to major platforms, including Microsoft and TikTok, earning recognition as a Most Valuable Researcher by Microsoft.

In my current role as a Security Engineer III at NetApp, I conduct thorough security reviews for applications and infrastructure, ensuring compliance with best practices. I have a proven track record of performing web application penetration testing and secure code reviews, identifying and validating vulnerabilities for remediation. My commitment to security extends to providing guidance to development teams, assisting in risk mitigation, and implementing solutions that have saved organizations significant costs in bounty payouts.

Throughout my career, I have collaborated closely with DevOps and development teams to ensure the implementation of secure coding practices and security best practices. My experience includes managing bug bounty programs, performing SAST and DAST security testing, and developing security tools that enhance organizational security posture. I am passionate about continuous learning and am currently pursuing AWS security certification to further enhance my skill set.

Experience

Work history, roles, and key accomplishments

DE

Product Security Engineer

Deriv

Apr 2022 - Present (3 years 3 months)

Wrote GitHub action workflows for security checks in the CI/CD pipeline and conducted application security reviews, secure architecture design reviews, and threat modeling. Implemented solutions for detecting and mitigating security vulnerabilities, including over 110+ dangling IP subdomain takeover vulnerabilities.

CS

Security Analyst

Cognizant Technology Solutions

Oct 2020 - Present (4 years 9 months)

Performed Dynamic Web Application Security Testing (DAST) and Static Application Security Testing (SAST) based on OWASP standards for Fortune 500 companies. Conducted Secure Code Reviews on internal project codebases using CheckMarx.

Education

Degrees, certifications, and relevant coursework

Sathyabama University logoSU

Sathyabama University

Bachelor in Engineering, Computer Science

2016 - 2020

Studied Computer Science at Sathyabama University. The curriculum covered core engineering principles and specialized topics in computer science.

SU

Sathyabama University

Bachelor of Engineering, Computer Science Engineering

Studied Computer Science Engineering, gaining foundational knowledge in various computing principles. Focused on understanding and applying engineering concepts within the field of computer science.

Find your dream job

Sign up now and join over 100,000 remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan