Rahul Zhade Email & Phone Number

New York, NY, US

San Francisco, CA, US

• Led product security for Copilot product suite, reducing review timelines from several weeks to less than one week by coordinating multiple security and compliance teams
• Created internal application security standard for internal Golang, JavaScript, and AI applications to proactively enforce and educate developers on compliance and security requirements
• Developed several internal auditing tools to identify code and infrastructure errors in CI, using CodeQL, tfsec and Brakeman, identifying an average of 10 vulnerabilities a day
• Designed internal Security Portal and created internal security standard for all Golang, JavaScript and AI applications, increasing speed of security requirement generation from two weeks to self service process of.

San Francisco, CA, US

• Built Rails application to automate vulnerability lifecycle management, tracking and assisting with prioritization of over 1000 vulnerabilities with FEDRAMP POAM reporting functionality
• Developed and maintained a Go-based backend job system to monitor for emerging threats to the business, preventing over 20 valid bounty reports a year
• Conducted acquisition security review of npm, performing multiple technical reviews and risk assessments of entire architecture and infrastructure to surface technical debt and compliance issues to inform acquisition.
• Managed Bug Bounty program by triaging and remediating vulnerabilities, including organizing and running private bounty engagements with over 30 private bounty hunters
• Led threat modeling, design reviews and security testing for over 100 new feature launches

San Francisco, California, US

• Developed and maintained Node.js microservices for data orchestration
• Designed API and corresponding UX for onboarding, login and management flows

San Francisco, CA, US

San Francisco, CA, US

• Expanded functionality of internal fuzzer tool to provide support for Golang projects, resulting in discovery of three high severity corruption bugs in open source and internal dependencies
• Validated and triaged automatic report of 400+ potential vulnerabilities to assist in Microsoft acquisition
• Managed public bounty program

Redmond, WA, US

Ran several summer coding camps for K-12 students as an instructor. Curriculums for camps included Minecraft Modding in Java, and Introduction to Arduino in Robot C.