Trupti S.

WORK HISTORY

EDUCATION

ABOUT TRUPTI S.

With more than 13 years of experience in Information Security, my expertise primarily lies in Application and Product Security. I possess a robust understanding of the Secure Software Development Lifecycle, and am well-versed in key security standards and methodologies. This includes a deep familiarity with security frameworks such as the OWASP Top 10 and various tools like BurpSuite, Veracode, Qualys etc. Hands on experience with manual pentesting, automating security scans in CI/CD, triaging SAST/SCA/DAST findings, AI pentest etc. As a Staff Application Security Engineer, my role is all about keeping our software safe and secure. I work on automating security checks (SAST/SCA/DAST) in CI/CD pipelines, making sure we catch any issues early on.Manage organization’s bug bounty program, where skilled outsiders help us find security gaps we might have missed. Another part of my job is doing manual penetration testing.A big part of what I do is, help our developers fix any security problems they find. I work with other companies we partner with to make sure they\'re secure too, by planning and co ordinating pentests to manage any risks.Involved in security reviews and threat modeling. Responsible for creating and maintaining our vulnerability dashboard, which helps us keep track of any security issues and fix them fast.I am deeply engaged in the creation, implementation, and continual improvement of our application security processes. This involves laying down robust security frameworks and ensuring they evolve in tandem with emerging threats and technologies.