Tanishq Bhatnagar Email & Phone Number

San Francisco, California, US

• Currently responsible for handling the application security program at Hinge Health. This includes:
• Performing regular and Ad-hoc scans (SAST, DAST, Containers, SCA) for multiple services across the product
• Integrating security tools with the CI/CD pipeline
• Discussing identified vulnerabilities with engineering teams and setting up severity ratings and SLAs
• Integrating the tools with Jira to create efficient reporting and dashboarding

New York, NY, US

New York, NY, US

• Currently responsible for handling application security at WorkFusion which includes:
• Performing security scans and internal PenTests on the product. Also coordinating with external PenTest teams and bug bounty hunters.
• Communicating with the engineering teams about identified issues, fixes and managing remediation timelines
• Performing threat models on our product and suggest infrastructural changes
• Testing the issues suggested by the customers and providing them with relevant solutions
• Assisting in the deployment of security tools and related services

Dublin 2, IE

• Worked with multiple clients based out of Australia and Singapore. Responsibilities included:
• Performing manual penetration testing on multiple enterprise applications.
• Performing manual secure code review and SAST for enterprise B2B applications. Suggest remediation steps to the development teams and track the open issues. Also assisting in the deployment of the DAST tools and.
• Performed ad-hoc security scans (DAST & SAST), Secure Architecture Reviews and Threat Modelling Assessments for multiple enterprise web applications
• Learning about the security of various cloud capabilities such as AWS and GCP and their architectures

Worldwide, OO

• Worked with a US-based Healthcare client. Responsibilities included:
• Integration of Secure SDLC (Software Development Lifecycle) and DevSecOps
• Effectively identifying, assessing and remediating risks associated with enterprise applications through threat modelling assessment, Application risk assessments (ARA) and Secure Architecture Reviews

Worldwide, OO

• Worked with a US-based insurance client. Responsibilities included:
• Built an application security program to drive the integration of Secure SDLC processes across the organization.
• To perform web application security testing on multiple enterprise applications including automated testing such as static (SAST) and dynamic security testing (DAST) as well as manual testing like penetration testing.
• Create multiple scripts in Python and Java to leverage REST APIs for automation

Worldwide, OO

Worked as an advisory intern with the Cyber Threat Management team and the work majorly dealt with Vulnerability Assessment and Penetration Testing (VAPT).

Bachelor Of Engineering - Be (Hons.), Computer Science

High School, Computer Science