sanjay tambe

Ensuring security of ARTIK cloud IOT platform by doing Architectural reviews, Threat Modeling, Pen testing, Security training, etc. The secure platform can be used to build IOT services & applications for Industrial and Consumer IOT systems. Implemented Incidence Response using 24 x 7 Threat Detection and monitoring in production. Ensuring HIPAA Compliance by incorporating security controls. Implemented Attack Surface Analysis of entire infrastructure in AWS. Implemented security testing of micro services using thousands of test cases from QA regression. Speaker at Security conferences: AppSec, LASCON.

Leading Security of ARTIK IOT cloud platform. Third party developers use it to build IOT solutions. Implemented 24 x 7 Threat Detection to monitor network level intrusion and generate alerts for incidence response. Implemented Static Code Analysis tool in CI/CD mode. Reviewed architecture & design from security perspectives and suggested security controls. Playing the role of HIPAA Compliance Security Officer. Conducted training on improving security of ARTIK IOT cloud. Provided guidance to DevOPs team on using results of Attack Surface Analysis to improve infra-structure patching process. Developed Strategic security plans and security tooling strategy to maximize security automation. Conducted Proof of Concept of WAF tools to improve 24 x 7 threat detection at application layer. Collaborated with hardware & cloud teams to improve end-to-end security.

Various positions of increasing responsibilities in building software applications for web and client server platforms.

* Positioned as a Core Security Champion at Consumer Eco System Group (CEG). Helped Mint.Com from the security perspectives in migrating to Amazon cloud environment. * Conducted several sessions of one day security training workshops to coach Architects, Developers, and Test Engineers on Web, Mobile, and AWS platforms. * Hands-on Security Reviews: Helped development groups in becoming self-sufficient in end-to-end security by conducting security reviews using Threat Modeling, Secure coding using Fortify, and Security testing using BURP/AppScan. * Security University: Developed comprehensive security training program consisting of Instructor-led training, Computer-based training, and practicum with security professionals.

* Positioned as a lead security consultant at Wells Fargo Bank to guide them in implementing secure coding practices. * Source Code Analyzer: Led program consisting of various projects in building software tools such as SCA, Run Time Analyzer, Audit Workbench, and Software Security Manager.