Harshneel More Email & Phone Number

Mountain View, Ca, Us

Sunnyvale, California, Us

- Collaborated closely with engineering teams on secure code reviews and conducted threat modeling for new products and features.- Revamped the HackerOne bug bounty program, resulting in a 20% increase in high-quality submissions from top-tier hackers.- Operationalized New Relic vulnerability management, identifying and mitigating high-risk code and runtime vulnerabilities.

Tampa, Florida, Us

- Launched product V1, AI powered project management platform for architects that syncs project finances, tasks, documents, schedules and reports across all stakeholders.- Ensured risks in the infrastructure and product are reduced through threat modeling & secure design.- Defined the Product roadmap & built a Product Security program for the entire organization.- Led customer discovery calls to improve product features and onboarding experience for users.- Built and integrated tools required by the company across all organizations.

San Francisco, California, Us

- Implemented Threat Modeling with the STRIDE framework, scrutinizing specs and workflows for Affirm's shopping and rewards offerings.- Introduced Secure Code Training program for new engineers, covering PCI compliance, secure coding - best practices, and OWASP top 10.- Established Security Champions program to engage security-minded engineers through workshops and hackathons.- Managed bug bounty submissions, validating and rewarding valid bugs, and collaborating with engineers for prompt remediation.

San Francisco, California, Us

San Francisco, California, Us

Managed bug-bounty program with 700+ researchers, validating submissions, rewarding valid bugs, and collaborating with engineer teams on remediations.Implemented Veracode SAST/DAST & software composition analysis for secure SDLC process.Operationalized threat modeling based on STRIDE methodology to review tech specs, PRDs, and data flow for Fast products.Deployed Cloudflare and Traceable.ai for real-time API security across Fast endpoints.Conducted Security and privacy training for all Fast employees, with additional OWASP Top 10 training for engineers, achieving a 90% audit success rate.Assisted in designing and implementing controls in Fast infrastructure to pass PCI DSS Level 1 audit within the first year of business.

San Francisco, California, Us

Provided secure architecture and implementation consultation to San Francisco office teams.Managed the triage, reporting, bounty payment, and resolution of vulnerabilities from an invite-only bug bounty program on HackerOne.Conducted security audits on business logic workflows for the Tradeshift GO platform, a virtual credit card generator.Developed and implemented a procedure for handling package security alerts from Tradeshift's Github repositories.

Palo Alto, Ca, Us

Designed and developed Role Based Access Control to allow paid users access to container services.Integrating on-demand container service(Kubernetes) for VMware vCloud Director along with making the core engine robust to handle deployment failures. Handle security bugs and patches for container service extension.Implemented a failover mechanism for CRUD operation on clusters and nodes.Integrated Swagger into existing vCloud Director to render API documentation and try it out feature for customers to see new APIs and give them a chance to see how it works.

Palo Alto, Ca, Us

Decentralized cloud marketplace enabling buyers and sellers to exchange space capacity.Implemented API-based automation framework to allow CE buyers and sellers to seamlessly deploy VPN tunnels for virtual machine migration and data packet flow.Network isolation on the seller side to enforce strict network isolation between various buyers hosted at the same seller using vCloud Director.

Palo Alto, Ca, Us

Created automation workflows with vRealize Orchestrator to simulate Cloud Exchange marketplace trading.Configured virtual machine templates with load-generation tools to generate resource consumption patterns for CE marketplace identification.Implemented a WAN simulator between virtual machines to emulate real-time scenarios during virtual machine trading.

Created a data scope application for 27 stock markets, processing stock code information and pricing updates.Developed a real-time streaming application for SGX prices and generated delayed snapshots for subscribed exchanges.Integrated SGX News into an online equity trading app to deliver news on Singapore-listed companies.Resolved issues, adjusted, repaired, and performed maintenance on Testing and Production environments.

Master Of Science (M.S.), Security Informatics

Bachelor Of Computer Science, Digital System Security

Council Of Higher Secondary Education

Council For The Indian School Certificate Examination (Icse)