Open to opportunities

Satish Sharma

@satishsharma

Message

I build secure cloud-native platforms through architecture, threat modeling, and DevSecOps.

India

Message

What I'm looking for

I'm looking to lead product security architecture for cloud-native and AI-enabled systems where secure-by-design practices, developer enablement, and measurable risk reduction are integral to product delivery.

At Stryker, I architect security for AI-assisted surgical planning, digital imaging, and cloud connectivity platforms serving 5M+ users. I define security boundaries, threat models, and secure-by-design patterns across cloud architecture, SDLC, compliance, and AI service integration.

Previously at DBS and Deloitte, I scaled DevSecOps, threat modeling, cloud and container security, and developer enablement across regulated banking and enterprise environments. My work reduced security bugs by 35%, shortened review cycles by 33–40%, and helped 800+ developers build security into delivery.

Experience

Work history, roles, and key accomplishments

Current

Staff Product Security Architect

Current

Stryker Corporation

Jan 2024 - Present (2 years 8 months)

Security architect and decision owner for three mission-critical SaaS and platform programs, defining security boundaries, threat models, and design patterns. Designed and scaled secure-by-design and DevSecOps architectural patterns across three regulated product lines, reducing security review cycle time by 33% while maintaining zero critical production vulnerabilities.

Threat Modeling Secure Architecture DevSecOps CI CD Security SAST SCA CSPM Container Security AWS Azure Zero Trust AI Security ISO 42001 ISO 27001 NIST 800 53 GxP FDA GDPR

Senior Product Security Engineer

Development Bank of Singapore

Jan 2019 - Dec 2024 (5 years 11 months)

Designed secure architecture patterns and achieved 35% reduction in security bugs in six months through structured risk analysis and proactive threat modeling. Led enterprise-wide threat modeling and secure architecture reviews, architected end-to-end DevSecOps pipelines, and designed regulatory compliance architecture ensuring PCI DSS alignment.

Threat Modeling Secure Architecture DevSecOps SAST DAST IAST Jenkins CSPM Container Security AWS Kubernetes Encryption Secrets Management PCI DSS Jira Bug Bounty YesWeHack

Cybersecurity Consultant

Deloitte

Jan 2015 - Dec 2019 (4 years 11 months)

Led application security assessments (OWASP Top 10, CWE Top 25) for enterprise clients across web, mobile, API, and cloud environments. Delivered secure architecture and code reviews across Java, C#, and Python applications, integrating automated code scanning tools into CI/CD pipelines to shift security left.