Vignesh Kannan

About Vignesh Kannan

Application Security and DevSecOps professional with 5+ years of hands-on experience securing enterprise applications across global delivery environments.I specialize in integrating security across the Secure Software Development Lifecycle (SSDLC) and embedding automated security controls within CI/CD pipelines, enabling secure and scalable software delivery. In my current and recent roles, I have independently handled responsibilities typically managed by a 13-member application security team, owning vulnerability detection, remediation, reporting, and security operations end to end.My technical expertise spans SAST, DAST, SCA, secret scanning, and container security, with extensive hands-on experience using tools such as GitHub Advanced Security, Mend, Coverity, Semgrep, Fortify, Snyk, and TruffleHog. I work closely with engineering, DevOps, and business stakeholders to identify security risks early, reduce remediation timelines, and strengthen overall security posture.I am passionate about shift-left security, DevSecOps automation, and building scalable application security programs that balance risk management with delivery speed.My Core focus areas:• Application Security & DevSecOps• SSDLC & CI/CD Security Automation• Vulnerability Management & Remediation• OWASP Top 10 & Secure Coding Practices

Experience

1. System Engineer

   Tata Consultancy Services

   Jan 2023 — Present · Bengaluru, IN

Education

• SRM IST Chennai

  Master of Business Administration - MBA, Business Analytics

• KLN College of Engineering, Madurai, India

  Bachelor of Engineering - BE, Computer Science and Engineering