Looking for a job

Kaustubh User

@kaustubhuser2

Message

Product Security Engineer at Omnissa who found 30+ High/Critical vulnerabilities across enterprise products.

India

Message

At Omnissa (formerly VMware), I found 30+ High/Critical vulnerabilities across product lines including Horizon Cloud, WS1 UEM, Hub Services, Catalog and AppVolumes. I documented each with a source-to-sink trace, PoC, CVSS score and code-level fix, and the issues were fixed before GA.

At ContentStack, I designed and implemented API security automation in GitOps CI/CD pipelines, reducing manual pentest effort by ~40%. I also conducted feature security reviews, baseline pentests and threat modeling, and built security tools including Rahasya, a SAST tool integrated into CI.

Experience

Work history, roles, and key accomplishments

Member of Technical Staff – Professional 2

Omnissa

Dec 2025 - Oct 2026 (10 months)

Found 30+ High/Critical vulnerabilities across product lines, conducted 50+ feature security reviews, and led baseline security pentests for enterprise products. Validated bug bounty submissions and wrote CI detection rules.

Authorization Flaws Cross Tenant Bypass OS Privilege Escalation BOLA Threat Modeling API Testing Secure Code Review CI CD Security MQTT JWT CVSS PoC Development

Security Engineer 1

ContentStack

Jul 2022 - Dec 2025 (3 years 5 months)

Performed end-to-end security assessments for REST/GraphQL APIs, web apps, and internal SDKs. Designed API security automation integrated into CI/CD pipelines, reducing manual pentest effort by ~40%.

REST APIs GraphQL Penetration Testing CI CD GitOps Threat Modeling Security Automation SAST DAST Secure Code Review Token Role Automation Fuzz Testing Endpoint Enumeration

Technical Consultant

ContentStack

Feb 2022 - Jul 2022 (5 months)

Optimized CDN configuration, cutting load times by 20%. Conducted code reviews across 50,000+ lines of code for security vulnerabilities and generated SAST reports.

CDN Security Code Review SAST DevOps Secure Deployment