Harshil Shah
Senior Security Engineer @American Family Insurance
Signup · Get unlimited contacts
WORK HISTORY
Senior Security Engineer @American Family Insurance
Los Angeles, CA, US
Driving the architectural transition from reactive vulnerability scanning to an intelligence-driven, automated risk management ecosystem- Eradicated critical infrastructure vulnerability debt by architecting a data-driven risk model that prioritized remediation based on EPSS exploitability and asset criticality- Automated enterprise-level security scalability by transitioning manual reviews to fully automated SAST, DAST, and SCA services within CI/CD pipelines through custom security-as-code development- Engineered an automated triage framework that programmatically injects real-time EPSS scores and CISA KEV data into the vulnerability lifecycle, accelerating qualitative risk calculations and reducing manual overhead- Optimized vulnerability ingestion workflows by developing custom Python scripts to interface with Qualys and Snyk Web APIs, centralizing disparate security data to streamline the \'discovery-to-remediation\' timeline- Designed an enterprise-wide Security Championship Program aligned with OWASP guidelines, recruiting and training advocates to decentralize security decision-making and integrate security early into the SDLC- Developed executive-level security dashboards and high-fidelity metrics that provide real-time visibility into remediation progress, organizational risk posture, and SLA compliance.
EDUCATION
Gujarat Technological University
Bachelor's degree, Computer Engineering
University of Washington Tacoma
Master's degree, Cybersecurity & Leadership
SKILLS
ABOUT HARSHIL SHAH
Security Practitioner with 11+ years of experience in Vulnerability Management, AppSec, and Big Data Engineering. Expert in architecting automated risk prioritization frameworks using EPSS and CISA KEV to eradicate large-scale infrastructure debt. Proven track record of scaling security through DevSecOps integration, Python-based tooling, and Security Championship programs. Leveraging a strong engineering foundation to translate complex technical threats into actionable, data-driven remediation roadmaps for global enterprise environments.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.