Looking for a job

praveen gummadi

@praveengummadi

Product Security Senior Specialist Engineer at SAP Ariba Labs, securing BTP applications and architecting secure AI agent-to-agent communications.

India

Message

What I'm looking for

I'm seeking a challenging and rewarding opportunity with an organization of repute that recognizes and utilizes my potential while nurturing my analytical and technical skills.

At SAP Ariba Labs (R&D), I lead security for applications on BTP and work on procurement application security, including mitigation of FEDRAMP vulnerabilities for the NS2 Procurement App.

I also research security for large language models and architected secure communication protocols for AI agent-to-agent interactions. My work includes threat modeling, security validation, and coordinating web application penetration tests.

Previously, at Eka Software Solutions Pvt Ltd(R&D), I assessed product and infrastructure security, tested REST APIs and Android apps, and reviewed source code using Veracode. I also worked with development teams on remediation and secure SDLC practices.

At Amadeus Software Labs R&D and Sigma-Aldrich Chemicals Pvt ltd (Millipore Sigma) (A business of Merck), I worked on application and network penetration testing, vulnerability management, and compliance. Earlier, at Trisan Info Pvt ltd, I performed web, network, and infrastructure penetration testing for clients.

Experience

Work history, roles, and key accomplishments

Current

Product Security Senior Specialist Engineer

Current

SAP Ariba Labs

Jul 2022 - Present (4 years 3 months)

Leading security for procurement applications on SAP BTP, managing FedRAMP vulnerability mitigation, and conducting security validation and threat modeling. Achieved Generative AI integration with SAP products and architected secure AI agent communication protocols.

Application Security Threat Modeling Penetration Testing OWASP SAST SCA FedRAMP SAP BTP Generative AI Secure SDLC Risk Assessment Security Awareness

Sr. Security Engineer

Eka Software Solutions Pvt Ltd

Dec 2019 - Jun 2022 (2 years 6 months)

Conducted internal product security assessments including application and network penetration testing, managed SAST/DAST/SCA reviews, and led third-party vendor penetration tests. Ensured PCI-DSS compliance and provided security awareness training.

PCI DSS Secure SDLC Threat Modeling Penetration Testing DAST SAST SCA OWASP REST API Security Veracode MobSF Network Penetration Testing

Sr. Security Engineer

Amadeus Software Labs

Aug 2018 - Dec 2019 (1 year 4 months)

Performed internal product security assessments and remediation verification using Qualys WAS. Served as GDPR SME and individual contributor for the TCH division across multiple regions, and approved third-party customizations globally.

DAST Qualys GDPR Application Security Secure SDLC Risk Assessment

Security Analyst

Sigma-Aldrich Chemicals Pvt Ltd

May 2017 - Aug 2018 (1 year 3 months)

Worked as a penetration tester in the compliance and governance team, performing web and network penetration testing, vulnerability management, and HIPAA compliance. Managed PCI-DSS submissions and infrastructure scanning.

Penetration Testing Vulnerability Management HIPAA PCI DSS IT Infrastructure Scanning Secure SDLC Security Awareness

Information Security Analyst

Trisan Info Pvt Ltd

Feb 2013 - May 2017 (4 years 3 months)

Performed penetration testing for various clients on web applications and network infrastructure. Served as SME for Qualys, Veracode, and Nessus, and conducted end-to-end security threat assessments.

Penetration Testing Web Application Security Network Security Qualys Veracode Nessus Vulnerability Management Threat Modeling