Pushpak Vuppalapati

I am a product security specialist with seven years of experience securing web, network, mobile, API, source code, open-source libraries, containers, and cloud workloads across multiple domains including construction, healthcare, e-commerce, education, retail, telecom, airlines, banking, and IT.

I proactively analyze zero-day vulnerabilities, perform architecture and design reviews, and carry out comprehensive vulnerability assessments and penetration tests for on-premises and SaaS applications. I have implemented WAFs in cloud environments and integrated security automation into CI/CD pipelines using Jenkins, Harness, and GitHub Actions.

My technical toolkit includes SAST/DAST tools, container image scanning, cloud security assessments on Azure, and hands-on experience with Docker, Kubernetes, Maven, JFrog Xray, Microfocus Fortify, Mend/Whitesource and other scanning platforms. I document findings with PoCs and actionable remediation strategies, and I audit results to remove false positives.

I am skilled at client engagement, delivering security training, and collaborating with development and project teams to align security measures with organizational strategy while ensuring compliance with best practices and regulatory requirements.