Hitesh Bhambhani Email & Phone Number

Nashville, Tennessee, Us

Nashville, Tennessee, Us

Nashville, Tennessee, Us

• Provide application/product security guidance to globally distributed product development organization.• Advise and educate development teams with respect to application security best practices, security automation within the SDLC, and the proper use of application security products and services.• Perform application security assessments of internally developed products and systems, covering architecture, design, and implementation.• Build threat models for and perform architectural risk assessments of internally developed products and systems.• Perform automated and manual security code reviews.• Build and maintain positive and productive working relationships with product development teams and individuals.• Provide assistance in response to product security incidents where application / product security expertise is required.• Participate in blameless postmortems and retrospectives in effort to improve security of products / systems.• Develop security assessment scripts and frameworks.• Continuously learn and keep abreast of the latest technical developments in the application/product security and cloud security spaces.• Perform research into and present on relevant security technology, practices, and threats.• Work closely with a small team of application security and penetration testing staff, in conjunction with product development, to ensure company products and services withstand foreseen and reasonable attacks.

Nashville, Tennessee, Us

Security Champion, Dev Lead for www.ServiceBench.comServiceBench is a SaaS solution designed to enable fully automated scheduling and dispatching with reporting capabilities that allows Asurion to facilitate communication between service administrator and service provider as well as aid in the parts-ordering process by allowing visibility into multiple inventories at one time.o Lead developer team to deliver product features of Servicebench for OEM client and Business Management Service offering for service providers. Contributed to the product solutions, architecture, design, development and maintenance.o Selected in the first batch of Security Mavens (Champions) by Product Security team and started trainings and certifications to acquire security knowledge.o Collaborated with dev leads in 3 ServiceBench teams to provide security guidance in design, code fixes, improved secrets management procedure with use of password vault, secrets storage in restricted files, improved PII encryption key management and roll-out encryption implementation with separate keys by geography.o Managed mitigation of Struts2 critical vulnerabilities to successfully prevent exploitation by leading the dev team's mitigation of this issue. My initiative and leadership with dev team and QA, was appreciated both by ServiceBench management and by Security leaders.o Significant progress done to evaluate and finalize a static analysis tool, by evaluating WhiteHat Source and Coverity scanning engines. The POC efforts required extensive work on AWS machine setup, scanning of sources, configuration of scanning engines, review of results - internally and with vendor with focus on false positive and false negatives.

Naples, Florida, Us

Major duties and responsibilities include but are not limited to the following: Ensure team productivity and effectiveness of a distributed multi-national team for the ASG-NaviPlex tool suite. Oversee the development of software requirement specifications, software design specifications, and the iterative development of the software that fulfills the specifications using a Scrum based Agile development process. Lead and contribute to the architecture, design, development and maintenance of NaviPlex Integration Services J2EE web application. Work with Quality Assurance, Customer Support, Marketing and Technical Communications to build and manage multiple product plans, balancing priorities and business requirements.

Naples, Florida, Us

Annandale, Va, Us

Developed lecture material and taught ITE 221: PC Hardware and OS Architecture, an evening class.Created homework and online quiz assignments on the NVCC BlackBoard system.

Knoxville, Tn, Us

Volunteer to deliver face to face instruction and to facilitate group exercises in interpersonal skills courses, throughout the country at University chapters of TBP Honor Society.Courses are formatted as 4 hour weekend sessions and cover following topics: People Skills, Group Process, Team Chartering, Analytical Problem Solving, and Effective Presentation Skills.Contributed to develop course content and exercises for the Effective Presentation Skills course.

Ms, Computer Science And Engineering

Bachelor In Engineering, Computer Science And Engineering

Computer And Information Systems Security/Information Assurance