Cyber Security Engineer - Application & Product Security Specialist

Suraesh Krishnaa Krishnamurthy Sampath

Tustin, California, 92782 945-***-****; ************@*****.*** Suraesh Krishnaa - LinkedIn

EDUCATION

The University of Texas at Dallas Aug 2023 - May 2025 Master of Science, Cyber Security, Technology and Policy (STEM) GPA 3.91 Courses: Cybersecurity Fundamentals, Digital Forensics and Incident Management, Data Security and Privacy. K. Ramakrishnan College of Engineering, Tiruchirappalli, India Aug 2017 - May 2021 Bachelor of Engineering, Computer Science and Engineering GPA 3.6 Courses: Problem Solving and Python Programming, Data Structures and Algorithms, Cloud Computing, Software Engineering. SKILLS

Languages: Python, Java R, C, C++, C#, TypeScript, JavaScript, Bash, Angular, React, .NET, HTML5, CSS3, SQL. Techniques & Tools: Penetration Testing, Threat modeling, SIEM, DevSecOps, SAST, SCA, DAST Security Automation, CI/CD, IR, Wireshark, Burp Suite, Docker, SSDLC, ISO 27001, HIPAA, NIST, Azure, OWASP Top 10, REST API, MySQL, Azure, AWS. Operating Systems: Windows, Mac, Linux, iOS Android. CERTIFICATIONS

WORK EXPERIENCE

SOCAL SKY Meditation Center, Tustin, USA Aug 2025 – Present Application Security Engineer

Developed and maintaining Web application components, reviewing and improving code quality.

Built and enhanced backend logic and workflows to support application functionality, maintainability, and performance.

Used vulnerability scanning tools to perform SAST/SCA and DAST scanning to detect and mitigate vulnerabilities. LivaNova(Healthcare), Houston, USA Jul 2024 – Nov 2024 Product Security Engineer Intern

Supported threat modeling and mapped threats to MITRE ATT&CK to prioritize detection and mitigation efforts.

Performed 30+ static and dynamic analysis scans using Veracode (SAST/SCA/DAST); triaged findings and tracked remediation through CI/CD ensuring secure production rollouts.

Validated remediation and security controls for medical device software to support HIPAA and FDA compliance. Cognizant Technology Solutions Jul 2022 – Jun 2023 Product Security Developer

Involved in designing and developing a secure AI-driven automated document validation software by implementing robust authentication, data encryption, privacy-preserving controls and validation workflows.

Applied secure coding, and vulnerability remediation using SAST and SCA tools, integrated fixes into CI/CD pipelines to ensure production-safe deployments, prevented regressions and tracked remediation progress. Cognizant Technology Solutions Jul 2021 – Jun 2022 Technical Support Engineer

Maintained production infrastructure and monitored logging/alerting systems for client AIG retirement services, improving incident detection and SLA compliance.

Automated routine security and operational tasks using Python scripts, decreasing manual efforts by ~25%. Cognizant Technology Solutions Feb 2021 – Jun 2021 Full-stack Engineer Intern

Built web applications using .NET MVC Framework, Bootstrap and MySQL, and deployed via Azure CI/CD pipelines with Docker and Kubernetes.

Contributed to secure containerized deployments and improved release efficiency and scalability.. ACADEMIC PROJECTS

SIEM Solution using Microsoft Azure & Sentinel Jan 2024 – Apr 2024

Designed and deployed a cloud-native SIEM in Microsoft Azure using Sentinel, connecting the logs from multiple resources to gain real-time visibility into threats. Developed custom KQL rules, automated playbook to neutralize security incidents. Descriptive Analysis of Built-in Security Features in Web Development Frameworks Aug 2023 – Dec 2023

Tested modern web applications against vulnerabilities such as Authentication bypass, Improper access control, Open redirects, Cross-site request forgery (CSRF), Template injection, and Cross-site script inclusion (XSSI), which can compromise their security.

CompTIA Security+ (Mar 2025)

(ISC)2 – Certified in Cybersecurity (Feb 2024)

TryHackMe – Junior Penetration Tester (Aug 2025)

CISCO – Introduction to Cybersecurity (Jan 2024)

Forage – Mastercard Cybersecurity Job Simulation (Jan 2024)

Contact this candidate