Rahul Tyagi Email & Phone Number

Atlanta, GA, US

• (Working for Various End Clients on Projects)
• Conducted end-to-end application security assessments, improving security posture by 25% through tailored security controls and best practices.
• Developed and implemented technical application security standards for engineering teams, boosting secure coding practices by 20%.
• Designed comprehensive application logging standards, increasing threat visibility by 30% and improving incident response times.
• Created and optimized executive-level security dashboards for better visibility and prioritization.

New York, NY, US

• WePay Inc (https://go.wepay.com/) now completely merged with JP Morgan Chase
• Spearheaded security architecture assessments for over 50+ mission-critical business applications, increasing security coverage by 30%.
• Built formal security architectural diagrams for all applications & services.
• Led cross-functional teams in maintaining PCI & Non-PCI compliance zones across WePay.
• Developed formal threat models for 35 critical applications & services, successfully reducing the attack surface.
• Engineered, tested & rolled out Signal Sciences WAF, enhancing threat detection efficiency by 40% and improving overall application security resilience.

Redmond, Washington, US

• Led a team in executing strategic information security maturity programs and initiatives, achieving a 25% improvement in security compliance.
• Rolled out the SonarQube IDE Plugin, proactively integrating secure code analysis, which reduced security vulnerabilities by 35%.
• Designed & implemented 100+ technical security controls, ensuring comprehensive & uniform security assessments across product development teams.
• Proactively addressed systemic security vulnerabilities through customized module training, leading to a 35% reduction in systemic security bugs.
• Completed security architecture reviews and assessments for 45+ critical projects, ensuring alignment with Microsoft's security standards.

Newcastle Upon Tyne, GB

• Directed & managed product security efforts across all engineering teams across North America.
• Conducted comprehensive BSIMM assessments across all Sage to identify & improve application security maturity and compliance with industry standards.
• Managed and mentored a team of 7 Security Champions, embedding security practices into product teams and scaling secure coding practices.
• Spearheaded the implementation of a gated end-to-end SSDLC, moving from ad-hoc practices to a structured, proactive security framework.
• Decreased security vulnerabilities by more than 40% through various proactive security initiatives.

Mountain View, California, US

• Conducted hands-on penetration tests as part of the Red Team for Intuit's primary products (TurboTax, QuickBooks, Mint), discovering and mitigating over 150 critical vulnerabilities.
• Assisted incident response team in threat hunting, SIEM log analysis, and post-incident analysis for application layer (Layer-7) traffic.

Orlando, Florida, US

• Established & built the Application Security Review (ASR) security architecture program from scratch, resulting in a 50% reduction in vulnerabilities.
• Managed and built security gates in the SSDLC, compliance with security standards for all BUs (WER, RCI, WVO).
• Conducted thorough penetration testing and ethical hacking for 85+ business-critical applications, discovering and mitigating security risks before release.

Riverwoods, IL, US

• Conducted in-depth application security architecture reviews and penetration tests for all customer- facing and critical business applications across all engineering and development teams.
• Worked on PCI- DSS maintenance & compliance maturity efforts.
• Led a team to engineer, test & roll out WAF (F5 ASM) for all externally exposed applications, enhancing security by 40%.

Master Of Science, Information Security

Bachelor Of Technology (B.Tech.), Computer Science Engineering