Neeraj V

About Neeraj V

Product Security Engineer at Amazon with a Master’s in Cybersecurity and 6+ years of specialized experience in Application Security, GenAI/LLM Defense, and Cloud-Native Threat Modeling. Expert in orchestrating Secure-by-Design architectures for distributed systems and defining security guardrails for Large Language Models (LLMs). Proven track record of leading Red Team operations and proactive Threat Hunting, automating DevSecOps pipelines (SAST/DAST/SCA), and driving security culture across engineering organizations.I thrive on proactively identifying and mitigating complex security risks. My core contributions include: Designing and Implementing Secure Architectures: Developing and enhancing the security posture of internal and external applications at Amazon through meticulous architecture reviews and secure design principles. Driving DevSecOps Transformation: Proven success in implementing comprehensive DevSecOps strategies. Notably, I built a high-impact AppSec team and established a full-fledged AppSec framework for a Fortune 500 company, championing a \"shift-left\" approach by integrating Threat Modeling (IriusRisk) and automated security testing tools (SAST, DAST, IAST, SCA) into CI/CD pipelines. Advanced Threat & Vulnerability Management: Skilled in leading threat modeling initiatives, conducting in-depth penetration testing (Web, API, Mobile, Network), secure code reviews, and driving vulnerability management to protect critical assets. Governance, Compliance & Zero Trust: Experienced in driving governance efforts, aligning security processes with standards like ISO 27001 & NIST, and championing the adoption of zero-trust architecture.🤝 Collaboration & Mentorship: Adept at collaborating with diverse stakeholders, including development teams, architects, and business units, to align security strategies with organizational objectives. I also have experience in establishing Security Developer Champions programs and mentoring team members.My technical proficiency spans:Application Security: Threat Modeling, SAST (Coverity), DAST (WhiteHat), SCA (Black Duck), IAST (Seeker), SDLC, Secure Coding.VAPT & Exploitation: Web, Network, API, Mobile, Thick Client, Active Directory.Cloud & DevSecOps: Azure Security, AWS Security, Container Security (K8s).Threat Intelligence & Response: CTI, Threat Hunting, Incident Response.

Experience

1. Product Security Engineer

   Amazon

   Jun 2025 — Present · Bengaluru, IN

Education

• Indian Institute of Information Technology and Management-Kerala(IITM-K)

  Master of Science - MS, Cyber security

  2018 — 2020

• TKM College of Engineering , Kollam

  BTech - Bachelor of Technology, Civil Engineering

  2013 — 2017