Pratim K.

About Pratim K.

Security Engineering Manager and TPM with a decade of experience building scalable third-party security capabilities, driving enterprise risk reduction, and developing high-performing security engineering and GRC teams. I specialize in transforming ambiguous security challenges into structured programs, leveraging automation and AI to scale assessments, and elevating security maturity across large, complex organizations.My experience spans hands-on security engineering leadership, vendor risk management, cloud security governance, and NIST/ISO-based controls design. I’m known for connecting technical depth with strategic vision, simplifying complex risk decisions for executives, and delivering measurable results through teams.I’ve consistently been recognized for:• Deep expertise in third-party security & risk modeling• Strong analytical and problem-solving skills• Driving security automation and AI adoption at scale for customers and security stakeholders• High-quality decision-making in ambiguous problem spaces• Building and maturing security programs from the ground up• Developing talent and raising the bar for quality at scale• Thoughtful leadership, empathy, and a people-first approachI’m passionate about enabling organizations to securely adopt technology at scale, embedding security earlier (“shift left”), and designing mechanisms that make secure choices easier for engineers, product teams, and business stakeholders.ISC2 CISSP and CCSP certified.

Experience

1. Manager, Third Party Security

   Amazon

   Feb 2023 — Present · Seattle, WA, US

   Lead a global security engineering and assessment team focused on reducing third-party and supply-chain security risk across a high-volume, high-complexity environment.Key contributions- Built and directed engineering and assessment programs that delivered significant reductions in SaaS and vendor access risks, translating ambiguous challenges into structured remediation initiatives adopted across the business- Built AI-assisted automation for assessment intake and evidence analysis, improving accuracy and reducing manual load for assessors- Led research into high-risk authentication patterns across web workflows, identifying actionable detection strategies and defining long-term roadmaps for engineering teams- Delivered automated dashboards and metrics that improved SLA visibility, surfaced operational bottlenecks, and informed quarterly leadership planning- Established assessment quality frameworks, enhancing scoping consistency and reducing new-hire onboarding time- Developed and grew a strong engineering and assessment team through hiring, coaching, and tailored development plans; improving team engagement consistently- Known across the org as a dependable, customer-obsessed security partner who simplifies complex decisions while maintaining high standards.

Education

• University of Mumbai

  Bachelor's Degree, Computer Engineering

  2010 — 2014

• University of Southern California

  Master of Science (M.S.), Cyber Security Engineering

  2014 — 2016

Skills

• Css
• Threat Modeling
• Network Security
• C++
• Information Security
• Sql
• Linux
• Windows
• Digital Forensics
• Javascript
• Mysql
• Nessus
• Powerpoint
• Microsoft Word
• Information Assurance
• Encase
• Python
• Java
• C
• Programming
• Php
• Computer Security
• Microsoft Office
• Html
• Penetration Testing