Biswajit Paul

About Biswajit Paul

I am a product security engineer with a proven track record of ensuring confidentiality, integrity, and availability through comprehensive security measures. I am involved in exploit mitigations, detection, threat modelling, containers, platform feature bring up and BSP integration through collaboration with cross functional teams.I have deep expertise in all phases of secure development (security design and threat modelling, development and security code review, countermeasures, fuzzing, static analysis and incident response).Proficient in C/C++, Python.

Experience

1. Engineer, Senior Staff Manager

   Qualcomm Innovation Center, Inc

   Aug 2014 — Present

   Lead a team of security professionals in conducting product security assessment, identifying vulnerabilities, and implementing mitigation and offensive security controls.· Collaborate with cross functional teams and business partners to integrate security practices (ex: access control, attack surface reduction and architectural decomposition) into the product development lifecycle and conduct comprehensive security reviews, resolve issues and execute mitigation strategy. · Proactively perform threat modelling, software architecture design & code reviews and discuses risk with leadership outside of project team to construct solution.· Implement mitigation features such as containerization, selinux, control flow integrity, address, and undefined behavior sanitizers(software/hardware), ebpf, seccomp filtering, secure boot, disk encryption, data execution prevention techniques, secure memory allocation schemes, and other various countermeasures.· Implement offensive security through a combination of program analysis, memory sanitizers and fuzzing and integrate it in the software development lifecycle.· Review technical documentation and work on establishing policies and processes around security incident response, vulnerability patching, severity, fix propagation to affected products effectively etc. · Implement methods and develop ways to do static analysis and find security vulnerabilities using neural network.

Education

• Visvesvaraya Technological University

  BS

  2003 — 2007

Skills

• Embedded Systems
• Java
• Openmax
• C++
• Brew
• Eclipse
• C
• Mobile Applications
• Rtos
• Seandroid
• Android
• Embedded Software
• Core Java