About Me
Security is a practice,
not a product.
I'm Anilkumar, a Product Security Engineer with a deep focus on Application Security. My work sits at the intersection of software engineering and security architecture — helping teams build systems that are secure by design, not just hardened after the fact.
My Security Philosophy
Security must live where the code lives — inside pull requests, architecture reviews, and deployment pipelines. My approach layers threat modeling in design, automated scanning in CI/CD, and continuous validation post-deployment, creating a feedback loop loop that makes every engineer a security stakeholder.
Security Profiles & Stats
Syncing stats...
Experience
Dec 2023 – Present
Senior Security Engineer @ Trinet Zenefits
Preforming new feature secure design review, architecture reviews, and automated source code analysis (SonarQube). Writing business security test cases and performing manual pentesting using Burp Suite and OWASP ZAP. Coordinating issue debriefing and remediation with product engineering.
Mar 2023 – Dec 2023
Member of Product Security @ Edgeverve
Handled application features security testing (Web/Mobile), DAST, and SAST. Analyzed BDH scans for Software Composition Analysis (SCA) compliance. Led regular security training sessions for junior members and eliminated Checkmarx false positives.
Mar 2021 – Feb 2023
Senior Security Consultant @ EY GDS
Engaged in US and Singapore projects including vulnerability management for a telecommunications provider via High-Risk perimeter validation and automated ad-hoc assessments using Nmap & Python. Orchestrated scheduled Qualys vulnerability scanning and continuous compliance scans for major Real Estate & Insurance clients.
Feb 2018 – 2021
Associate InfoSec Consultant @ SecurEyes
Performed 30+ manual/automated penetration tests on Web, Mobile (iOS/Android), API, and Thick Clients globally across Finance, Banking, and Health Care. Led threat modeling and code analysis for 3-member engagement teams.
Certification Arsenal
Technical Arsenal
Application Security
DevSecOps & Automation
Cloud & Infrastructure
Offensive Security
Security Pulse v2.0 // Real-time CIRCL.lu Feed
Tech Arsenal: AWS, AZURE, K8S, JAVA, PYTHON, GO
Professional Quest Log
Senior AppSec Role
2024Securing industrial-scale cloud architectures.
OSCP Certification
Q2 2026Deepening offensive security and penetration testing mastery.
Cloud Security Architect
2027Specializing in Zero Trust and multi-cloud security governance.
Stay ahead of the Threat Landscape
Join 2,000+ security professionals. Get monthly deep-dives on AppSec, DevSecOps automation, and latest vulnerability research directly in your inbox.
Zero Spam · One Click Unsubscribe · Private Always