# Kaustubh User

Kaustubh User is a remote worker on Himalayas, Member of Technical Staff – Professional 2 at Omnissa, based in India.

Source: https://himalayas.app/@kaustubhuser2

```text
Product Security Engineer at Omnissa who found 30+ High/Critical vulnerabilities across enterprise products.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | India |
| Authorized to work in | India |
| Salary expectations | 2642k+ INR |
| Job categories | Product Security Engineer, Security Engineer |
| Skills | Application Security, Product Security, Penetration Testing, API Security, Vulnerability Research, Threat Modeling, Secure Code Review, API Testing, Mobile Security, Vulnerability Assessment and Penetration Testing (VAPT), Threat Simulation, SAST, DAST, Cloud Security, CDN Security |
| Website | https://raikaustubh.com |
| GitHub | https://github.com/KaustubhRai |

## About

```text
At Omnissa (formerly VMware), I found 30+ High/Critical vulnerabilities across product lines including Horizon Cloud, WS1 UEM, Hub Services, Catalog and AppVolumes. I documented each with a source-to-sink trace, PoC, CVSS score and code-level fix, and the issues were fixed before GA.

At ContentStack, I designed and implemented API security automation in GitOps CI/CD pipelines, reducing manual pentest effort by ~40%. I also conducted feature security reviews, baseline pentests and threat modeling, and built security tools including Rahasya, a SAST tool integrated into CI.
```

## Experience

### Member of Technical Staff – Professional 2

[Omnissa](https://himalayas.app/companies/omnissa). Dec 2025 - Oct 2026

```text
Found 30+ High/Critical vulnerabilities across product lines, conducted 50+ feature security reviews, and led baseline security pentests for enterprise products. Validated bug bounty submissions and wrote CI detection rules.
```

Skills: Authorization-Flaws, Cross-Tenant-Bypass, OS-Privilege-Escalation, BOLA, Threat-Modeling, API-Testing, Secure-Code-Review, CI-CD-Security, MQTT, JWT, CVSS, PoC-Development

### Security Engineer 1

[ContentStack](https://himalayas.app/companies/contentstack). Jul 2022 - Dec 2025

```text
Performed end-to-end security assessments for REST/GraphQL APIs, web apps, and internal SDKs. Designed API security automation integrated into CI/CD pipelines, reducing manual pentest effort by ~40%.
```

Skills: REST-APIs, GraphQL, Penetration-Testing, CI-CD, GitOps, Threat-Modeling, Security-Automation, SAST, DAST, Secure-Code-Review, Token-Role-Automation, Fuzz-Testing, Endpoint-Enumeration

### Technical Consultant

[ContentStack](https://himalayas.app/companies/contentstack). Feb 2022 - Jul 2022

```text
Optimized CDN configuration, cutting load times by 20%. Conducted code reviews across 50,000+ lines of code for security vulnerabilities and generated SAST reports.
```

Skills: CDN, Security-Code-Review, SAST, DevOps, Secure-Deployment

## Education

### University of Mumbai

Bachelor of Technology, Computer Engineering

```text
Completed a Bachelor of Technology in Computer Engineering from the University of Mumbai in 2022.
```

## Tech stack

- Postman
- Kubernetes
- JavaScript
- Python
- Go
- MQTT
- ZAP
- GraphQL
- Docker
- Zap
- Burp Suite
- Semgrep
- Bash
- Nuclei
- AWS
- REST APIs

To contact Kaustubh, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [nithissh s](https://himalayas.app/@nithisshs): Senior Security Engineer, Freshworks
- [Sourav Kalal](https://himalayas.app/@souravkalal): Senior Security Engineer I, Bureau Veritas
- [Pushpak Vuppalapati](https://himalayas.app/@pushpakvuppalapati): Specialist Product Security, Amadeus Labs India Pvt Ltd
- [YOUSUF NIHAL](https://himalayas.app/@yousufnihal): Product Security Consultant, Emirates NBD
- [Om Lakshmi Shanthi Venugopal](https://himalayas.app/@omlakshmishanthivenu): Senior Security Engineer, IBM
- [Adarsh Kumar](https://himalayas.app/@adarshkumar12): Product Security Engineer, Splunk
- [arun kumar](https://himalayas.app/@arunkumar29): Staff Product Security Engineer, Revenera
- [GURU NARAYANA PRASAD User](https://himalayas.app/@gurunarayanaprasadus): Cyber Security Analyst, ODCET Technology
- [Santhoshini Ganta](https://himalayas.app/@santhoshiniganta): Associate Information Security Engineer, Gainsight
- [Sivakumar Balajee](https://himalayas.app/@sivakumarbalajee): Senior Software Security Engineer, CloudBees