Open to opportunities

nithissh s

@nithisshs

Message

Dynamic Lead Product Security Engineer with 5+ years of experience.

India

Message

What I'm looking for

I am looking for a role that fosters innovation and collaboration, where I can leverage my security expertise to drive impactful projects and contribute to a strong security culture.

I am a dynamic and results-driven Lead Product Security Engineer with over 5 years of experience in protecting high-scale SaaS and cloud-native applications. My expertise lies in secure SDLC, threat modeling, penetration testing, and DevSecOps. I have a proven track record of embedding security within CI/CD pipelines, mentoring teams, and delivering measurable improvements in organizational security posture.

Throughout my career, I have been recognized as a contributor to the global security community, with impactful vulnerability disclosures and public speaking engagements. My recent role as a Senior Security Engineer at Freshworks involved performing penetration testing on over 50 applications and integrating security tools that reduced security issues by 30%. I am passionate about fostering a culture of security awareness and continuous learning within organizations.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Engineer

Current

Freshworks

Nov 2023 - Present (2 years 7 months)

Performed penetration testing on 50+ internal and external applications, identifying critical vulnerabilities and driving fixes with engineering teams. Spearheaded application security for core products (Freshsales, Freshmarketer), integrating Semgrep into CI/CD pipelines which reduced security issues by 30%.

Penetration Testing Application Security CI CD Semgrep

Vulnerability Analyst II

Mastercard

Dec 2022 - Present (3 years 6 months)

Consolidated Mastercard's VDP and RDP bug bounty programs, saving $100,000+ and optimizing operational workflows. Triaged and managed vulnerabilities across 500+ internal and acquired applications, ensuring efficient risk remediation.

Bug Bounty Vulnerability Management Workflows

Security Engineer

Tata Elxsi

Jul 2021 - Present (4 years 11 months)

Designed and developed a proprietary DAST engine integrated into Agile pipelines, enabling automated vulnerability detection. Performed comprehensive research on 55,000+ WordPress plugins, disclosing several CVEs with high community impact.

DAST Agile CVE DevSecOps

Cybersecurity Analyst

IC TECH

Jul 2019 - Present (6 years 11 months)

Executed penetration tests and security audits on web and cloud applications during early-stage DevSecOps adoption. Collaborated with engineering to design secure software architectures and threat models.

Penetration Testing Security Auditing DevSecOps Security Architecture Threat Modeling Security Workshops