Soumen Bhattacharya

About Soumen Bhattacharya

Cybersecurity & Application Security Leader | Architecting Secure Digital InnovationsProven security leader with expertise in enterprise security strategy, application security, and cryptographic solutions. Extensive experience across global enterprises such as CapitalOne, Delta Dental, eBay, Visa, and Cisco. Passionate about secure digital transformation, risk management, and building high-performing security teams. Strategic Security Leadership – Established security strategies, governance policies, and risk frameworks to ensure compliance with PCI-DSS, NIST, ISO, and FIDO standards. Application & Cloud Security – Led the design of secure payment solutions (SamsungPay, GooglePay, Visa Developer Platform) using advanced cryptography, secure storage (SE, TEE, TPM), and tokenization. Identity & Access Management – Designed authentication, IAM, and API security solutions using OAuth, SAML, PKI, MFA, and risk-based authentication. Threat Modeling & Risk Management – Conducted security assessments, enforced best practices, and integrated security into product development lifecycles. Team Leadership & Collaboration – Built and mentored world-class security teams, driving innovation, execution, and efficiency across security initiatives. Industry Thought Leadership – Speaker at ISC2, RSA, and other major conferences, sharing insights on cybersecurity, cryptography, and emerging threats.Security Specialization: Data Security & Cryptography IAM & Authentication (OAuth, SAML, PKI, MFA, FIDO) API & Cloud Security Mobile Security (HCE, TEE, TPM, Secure Storage) Payments & Tokenization SecurityHolds multiple security patents, actively contributes to security communities, and drives innovation in securing digital ecosystems. Patents : https://patents.google.com/?inventor=Soumendra+Bhattacharya & oq=+inventor:(Soumendra+Bhattacharya) Google Patents Justia Patents

Experience

1. Director, Product Security - Consumer Identity, Api and Digital Payments

   Capital One

   Aug 2020 — Present · San Francisco, CA, US

   Led the development and implementation of advanced security solutions for Digital Payments and Consumer Identity, integrating GovID-based and context-aware authentication, passkey, bot protection, and device binding for robust authentication and enhanced security- Optimized identity management into a unified enterprise framework with dynamic authentication tokens and configurable policies to improve security efficiency and user experience- Spearheaded API security initiatives, driving shadow API detection, data loss prevention (DLP), and runtime security enhancements. Enforced strong authorization protocols across API and Identity gateways to safeguard sensitive data- Led advancements in digital wallet and mobile application security, enabling Card Tap-based authentication, autofill functionality for GooglePay, and driving the multi-bank EWS Paze initiative to secure email-based checkout processes- Successfully adopted a cloud-based payment HSM service through risk and payment cryptography assessments, creating a new security paradigm in the payments industry- Led enterprise-wide strategic initiatives, securing GitHub Copilot, application and browser extensions, Data Protection, GenAI technologies, Island Browser, and Zero Trust frameworks. Shaped information security policies and implemented high-quality threat modeling and risk assessment practices across teams- Collaborated with executive leadership and business stakeholders as a trusted security advisor, addressing security needs and priorities. Advocated for security best practices across Architecture Review, Threat Assessments, Data Protection, AppSec, WAF, SIEM, Vulnerability Management, Incident Response, and Third-Party Risk Management- Built and empowered a high-performing security team, fostering collaboration, innovation, and continuous learning, driving security excellence across all initiatives.

Education

• Indian Institute of Technology (IIT-BHU)

  Bachelor of Technology, Electrical Engineering) Department of Electrical Engineering