Nishant Das Patnaik Email & Phone Number

Karnataka, India

San Jose, Ca, Us

San Jose, Ca, Us

Some of the technically challenging problems I have designed and developed:- Solution for fast code linting on the CI/CD pipeline for identifying security blockers for various languages including Javascript, Python, Java, Objective-C, Android, PHP, Ruby, Marko & Dust (templating engines)- Solution to detect and mitigate automated synthetic/inorganic user registration (desktop & mobile), with negligible or no code change to existing applications.- Solution to detect and mitigate credential stuffing attacks (automated login attempts) on eBay applications (desktop & mobile), with negligible or no code change to existing applications.- Solution to monitor live application attacks/threats at runtime with least false positives, with negligible or no code change to existing applications.- Solution to detect leakage of sensitive data from containerized application- Solution for automated and deep dynamic/runtime security testing of mobile apps by interacting and navigating the app for covering user flows (for iOS and Android) in the CI/CD pipeline

San Jose, Ca, Us

Some of the technically challenging problems I have architected & implemented:- Engine to perform fast code linting on the CI/CD pipeline for identifying security blockers for various languages including Javascript, Python, Java, Objective-C, Android, PHP, Ruby, Marko & Dust (templating engines)- Engine to perform deep, dynamic security testing and runtime security profiling of mobile apps by automatically interacting and navigating the mobile app for covering user flows (for iOS and Android) in the CI/CD pipeline- System to detect and mitigate automated fake user registration (account creation) (desktop and mobile) and credential stuffing attacks (automated login attempts), with negligible or no code change to existing web applications.- System to stream L7 attacks/threats signals at runtime with least false positives (contextual analysis), with negligible or no code change to existing applications, to data sciences team for early attack detection, bad actor profiling and vulnerable detection in the source-code in near-realtime.

San Jose, Ca, Us

My roles and responsibilities includes: - Help product development teams to ensure security in engineering architecture - Develop end-to-end automation for on-going operations within the Infosec organization - Fast prototyping of engineering solutions for cutting edge problems - Research & develop advanced solutions for anti-automation & anti-fraud - Perform black-box penetration testing and code reviews of our flagship services, product offerings and partners apps. - Guide the technology organization's security and privacy initiatives by participating in design reviews and threat modelling. - Participate in our incident response (bug bounty/responsible disclosure) and vulnerability remediation efforts. - Perform cutting-edge applied research on new attacks and present new findings to both internal and external audiences. - Evaluate application security tools for internal consumption. Develop new automation and tooling to improve our detection and prevention capabilities. - Develop secure code practices and provide hands-on training to developers and quality engineers.

Singapore, Sg

* Successfully running the Information Security Program across the company,* Ensuring adherence to Secure Development Lifecycle among various engineering functions,* Building security standards, policies for secure coding, secure data handling, secure networking, secure crypto implementation etc.,* Strategizing application security solutions for developers ranging from security libraries, automated source code review throughout continuous integration and deployment,* Building & procuring continuous security scanning, monitoring & analysis of applications, networks, cloud and internal assets,* Evangelizing security among the co-workers through casual discussions, training sessions, documentation, live demonstrations etc.* Interview & hire security engineersIn short:I was responsible for Information Security at InMobi - both production and corporate environments. If our infrastructure or application was vulnerable, I tried to fix it.If we didn't know, I tried to break it.If it was on fire, I put it out.

Sunnyvale, Ca, Us

Senior Product Security Engineer at the Yahoo! Paranoids organisation. Responsible for:* Product Security Design & Architecture Review, Threat Modelling* Customer privacy & security advocate* Security consulting and due-diligence for Mergers & Acquisitions* Legal InfoSec Contract Review (New Partnerships & Alliances)* Manual Source Code Review (Logical Flaws, RegEx Development)* Penetration Testing & Vulnerability Assessment for Web, Desktop & Mobile Products* Security point-of-contact for Yahoo! development teams in India* Security Automation (Processes & Tools)* Internal Training & Documentation* Interview & hire security engineers

San Jose, Ca, Us

I was the first hire of eBay India's security team (PayPal India Pvt. Ltd.), responsible for:* Integrating Microsoft SDL v5+ with dev teams* Threat Modelling - Web Applications* Web/SOA/Mobile (Android & iOS) - Negative/Fuzz Testing - Penetration Testing - Exploit Development* Training Material Development - Web Application - Mobile Applications (Android/iOS)* Evangelize Security across eBay Inc.* Interview and hire security engineers (contract/full-time)

Bachelor Of Technology - Btech, Computer Science Engineering

Aissce, Maths, Physics, Chem, I.T., English

Aisse, General Studies