Gursev Kalra

About Gursev Kalra

Values driven security professional. I have led multiple high performing teams and mentored individuals at Salesforce, McAfee/Intel Security, and Computer Associates (CA).I have extensive hands on experience in software security, Source code reviews, Security Research, Threat Modeling, Web application penetration tests, Mobile security and more. I was also the technical trainer for Foundstone\'s Building Secure Software and Java Secure Coding classes. I have written several security related whitepapers and free tools. I have spoken at several security conferences including BlackHat, OWASP AppSec, NullCon, ToorCon, Infosec Southwest etc. Collection of my free tools and whitepapers https://github.com/gursevFree Security Tools Authored- PixelCAPTCHA - A point and click CAPTCHA Solution. https://pixelcaptcha.info- JMSDigger - A tool to assess Enterprise Messaging Applications - open source- TesserCap - A visual CAPTCHA solving tool- Oyedata - For OData assessments- SSLSmart - A Ruby based SSL cipher enumeration tool - open source- clipcaptcha - CAPTCHA provider impersonation tool - open sourceRecognized Work- CAPTCHA Re-Riding Attack - Voted as 8th best web hacking technique of 2012- A Pentesters Guide To Hacking OData - Voted as 10th best web hacking technique of 2012- TesserCap - A Visual CAPTCHA Solving Tool - Voted as 8th best web hacking technique of 2011- Research included in OWASP Testing Guide Print- PixelCAPTCHA - CAPTCHA Hax with TesserCap - Printed in Russian Hacker magazine (http://eng.xakep.ru/xakep.asp Feb, 2012 edition)Responsible Vulnerability Disclosures- CVE-20••••60- CVE-20••••79- CVE-20••••92

Experience

1. Vice President, Product Security

   Salesforce

   Feb 2024 — Present

Education

• National Institute of Technology, Jalandhar

  Bachelor of Technology, Electrical, Electronics and Communications Engineering

• Carnegie Mellon University - Heinz College of Information Systems and Public Policy

  Chief Information Security Officer (CISO) Certificate

  2022 — 2022

Skills

• Security
• Pci Dss
• Cissp
• Penetration Testing
• Vulnerability Assessment
• Security Audits
• Information Security Management
• Application Security
• Network Security
• Java
• Ruby
• Unix
• Information Security
• Internet Security
• Security Architecture Design
• Computer Security
• Security Research
• Threat Modeling
• Malware Analysis
• Consulting
• Owasp
• Web Application Security
• Vulnerability Management
• Mobile Security