Tausif Siddiqui Email & Phone Number

Pune, Mh, In

Cambridge, Massachusetts, United States

• Pursuing CS50 from Harvard University.

• Executed cryptographic operations using GPG/PGP via command line for secure data encryption and decryption.• Led high-profile security incidents, ensuring timely and effective resolution.• Earned a CVE record for discovering a security flaw in the setuid Linux component ‘sudo’ - CVE-2023-7090.• Developed and modified web parser scripts in Python and Bash to extract CVE metadata from public security advisories like Mozilla Security Foundation Advisory.• Researched Python security vulnerabilities such as CVE-2022-48565 and CVE-2019-6690.• Performed Threat Response and mitigated security exploits identified in CISA advisories.• Helped Red Hat become and grow as a Root CNA for open-source projects.• Conducted regular security assessments of Red Hat's products and services, using an in-house SIEM tool.• Developed security documentation and maintained accurate CVE pages.• Investigated vulnerabilities and communicated risks to senior leadership and technical teams.• Coordinated responses with engineers, architects, product managers, and customers.• Participated in industry working groups for vulnerability disclosure and coordination standards.

• Secured Red Hat's products and services, ensuring compliance with industry standards.• Collaborated with security teams at Google, Apple, and Microsoft to resolve open-source security issues.• Represented Red Hat in the Distros list, coordinating with the open-source community.• Identified and solved common tool and workflow issues.• Gathered and analyzed data from OSINT, proprietary feeds, and internal logs.• Improved team collaboration and contributed to PSIRT strategy and OKRs.

• Built a manifesting tool in bash that reduced search time for product manifests by 60% - https://github.com/taus11/manifest_script.• Assigned and communicated 53 CVE IDs for security vulnerabilities, contributing to the MITRE open-source CVE list on GitHub. • Ensured smooth team operations, served as the first point of contact for external dealings, and promoted a balanced and enjoyable working environment while maintaining high-quality work.• Developed and led a team of 6 in vulnerability intake and incident response, contributing to the CVE program and serving as a CNA for Red Hat.• Resolved security vulnerabilities impacting shipped products, achieving a high efficacy rate in vulnerability management.• Actively searched for new vulnerabilities and resolved reported issues, maintaining high security standards and protecting product integrity.

• Acted as a key member of the PSIRT team, managing and resolving security incidents with a 95% success rate in incident resolution.• Contributed to the Forum of Incident Response and Security Teams (FIRST), collaborating with global security teams to enhance incident response strategies and protocols.• Delivered webinars to educate customers on CVSS ratings and security industry standards, reaching over 100 attendees and increasing customer awareness by 40%.

• Conducted vulnerability triage and assessment to evaluate and address security issues, resulting in a 30% reduction in vulnerability response time.• Enhanced customer engagement by improving customer satisfaction scores by 20%.• Proactively monitored open-source security landscape by tracking and resolved security issues, leading to a 15% increase in product security.• Managed CVE assignments and Red Hat’s CNA ensuring timely and accurate CVE assignments and maintaining a 100% compliance rate with CNA requirements.

Pune Area, India

• Performed Automation tests using Python.• Contributed to the Quality Engineering team for the FreeIPA Identity Management platform, enhancing software quality and reliability.• Conducted in-depth research on the setuid sudo package used in identity management, providing insights that improved security protocols.• Responsible for identifying and resolving issues in automated test cases, leading to a 25% increase in test efficiency and a 15% reduction in test failures.

Nagpur Area, India

• Implemented the installation, deployment, and maintenance of computer systems using open-source technologies, proficiently managing both GUI and CLI environments. • Achieved a 30% improvement in deployment speed and reduced maintenance costs by 25%.

Nagpur

• Selected in the project placement drive at Persistent Systems, Nagpur, showcasing technical skills and expertise.• Developed an innovative project based on IoT, contributing to cutting-edge technology solutions.

Nagpur

Bachelor Of Engineering (B.E.), Information Technology

• Speaker at the Graduation convocation for 2018 Batch • Google Student's Club - Core member: Conducted seminar on digital marketing. •.

Higher Secondary Certificate (Hsc), Physical Sciences

Secondary School Certificate (Ssc)

• National Cadet Corps (NCC) - Air Wing Seargent