Kaustubh Trivedi

WORK HISTORY

ABOUT KAUSTUBH TRIVEDI

I’m a Product & Cloud Security professional who bridges technical expertise with engineering management to drive scalable, secure-by-design practices across modern application and cloud environments. I specialize in Secure Code Reviews, SAST/DAST integration, DevSecOps, and API/WAF protection, ensuring that security is embedded early and effectively across the SDLC. My code reviews go beyond automation — focusing on real-world logic flaws, authentication missteps, and data exposure risks in both monolithic and microservices architectures. On the cloud front, I work extensively with CNAPP solutions like Prisma Cloud, implementing controls for workload protection, cloud misconfiguration detection, identity management, and runtime defense. I align these tools with organizational DevOps processes to create a unified security posture across hybrid and multi-cloud environments. As part of my engineering management function, I lead security tool implementation, collaborate with development and infrastructure teams, manage third-party vendors, and ensure that security strategies support — not slow — product innovation. Core Focus Areas: Secure Code Review (Java, Python, APIs) SAST/DAST Deployment & Tuning (SonarQube, Burp, ZAP) DevSecOps: CI/CD Security Automation (GitHub Actions, Jenkins) API Security & WAF (Akamai, OWASP Top 10) Cloud Security & CNAPP (Prisma Cloud, AWS/Azure hardening) 🧱 Data Security & Compliance 🤝 Vendor & Tool Management (Security solutions evaluation, onboarding) Security Program Enablement & Cross-Team Collaboration