Devendra Durgapal Email & Phone Number

Santa Clara, California, Us

Bengaluru, Karnataka, In

As a security engineering leader -- Defined product & platform security vision, strategy, roadmap & KPIs- Built/Hire/Manage a team of high-performing security engineers- Responsible for below domains at high level Product Security - Web & mobile application security - Web APIs security (REST-API, SOAP, GraphQL, etc) - Product/Tech spec reviews & Threat Modeling - Internal & external security assessment (VAPT, Red Teaming, Bounty program, etc) - Product Security Requirement & Secure Coding Guidelines - Secure SDLC, Shift Left with DevSecOps CI/CD pipelinesSecurity Engineering - Automating security tools & integration for KPI collection, reporting - Building secure librariesInfrastructure Security - Cloud security architecture & configurations - AWS security tooling & automation - Perimeter security controls (WAF & DDoS protection) - Identity and access management - Cloud workload protection - Cloud security governance - Container security Security Operations - Vulnerability management - Security logging & monitoring (WAF, SIEM, etc) - Alerting & automation - Incident response, etc.Compliance & Audit - PCI DSS, ISO 27001, CIS, CSA - CCM, NIST CSF - Statutory audits & cyber assessments - Data privacy & localisation - Third party vendor evaluation & audit

(ISC)² Bangalore chapter is a not-for-profit organisation which meets regularly and conducts events centered around various aspects of Cyber Security providing an opportunity towards continuous learning and networking for InfoSec professionals. Chapter members are security enthusiasts, (ISC)² credential holders like CISSP, CSSLP & etc., and students.Being treasurer, got the chapter registered with local authorities and ensured that the chapter funds are utilised efficiently. Conducted several information security events, soliciting sponsorship from corporates at Bangalore and working with eminent experts in the information security domain to speak at the events.

Mountain View, Ca, Us

Leading product security for both on-prem & cloud MDM products. Responsible for end to end secure SDLC, DevSecOps, Incident Response and Compliances (FedRAMP, FIPS 140-2, Common Criteria, SOC2 Type 2, ISO 27001)- Spearheaded external VAPT program for 2018 and 2019 for all MobileIron products. From identify vendors, defining external VAPT process and coordinating internally/externally for VAPT. Able to reduce external VAPT cost to 1x from 4x. - Setup DevSecOps pipeline in jenkins CI/CD with jira integration - By addressing customer RFP risk questionnaire to close many sales deals - Supported in achieving ISO/IEC 27001 certification in 2019

Palo Alto, Ca, Us

Product security lead for multiple products & solutions of vSphere product-line. Responsible for adherence & executions of secure SDLC for maintenance releases. - Co-authored "Software Product Security Test Reference Guide" in VMware- Authored internal technical journal on "Evolution of NUMA in processor industry"- Conducted multiple Hackathon events for vSphere productline- Successfully delivered many security escalations and hot patches- Developed security testing framework in python

Bachelor Of Engineering (Be), Computer Science

Mathematics