Samikya B

Experience

1. Dedicated Application Security Engineer

   Caterpillar Inc.

   Dec 2023 — Present · Peoria, IL, US

   As part of shifting Security left in SDLC lifecycle (SSDLC) and SAST/DAST Management - I implement Enterprise level migration to tools like CodeQL, Rapid7 and Fortify where it helps teams secure their code before deploying to production by identifying OWASP vulnerabilities, analyzing them and providing remediation assistance- I work in automating the triaging process, leveraging tool APIs to ensure timely and accurate vulnerability assessments which helps developers develop secure product- Help in securing Kubernetes containers using tools like Prisma- I work as a Liaison between Bug bounty and Developers by working Developers to navigate through the findings until fixed this involves walking through/reproducing the vulnerability identified by Bug Bounty researchers, help internal team with code changes for the fix and retesting/revalidating the vulnerability- Being part of Security Assurance Testing (Pen Testing), I help developers with those vulnerabilities as well and follow the process similar to bug bounty issues mentioned above.

Education

• Jawaharlal Nehru Technological University

  Bachelor of Technology (BTech), Computer Science

  2008 — 2012

• University at Albany

  Master's degree, Computer Science

  2013 — 2014