About

Praveen Darshanam is a seasoned DevSecOps professional with over 15 years of experience in application, system, and network security. He has a sound understanding of various attack techniques like Buffer Overflows, OWASP Top 10, and their mitigation mechanisms. Praveen has discovered vulnerabilities in critical infrastructure (ICS) and enterprise-grade products like Advantech, Samsung, Apple, Adobe, Chrome, etc., with multiple CVEs. He is an expert in cloud security, Kubernetes, microservices, vulnerability research, and malware analysis, reverse engineering, and exploit writing, debugging with Windbg, OllyDBG, IDAPro, etc. He is also skilled in web application security, OWASP Top 10, traffic analysis, threat management, and source code analysis using Python, C, Assembly. Currently, Praveen works as a Senior DevOps Security Engineer (DevSecOps) at PTC, where he secures various PTC products like ThingWorx Internet of Things (IoT) Platform, Vuforia, Windchill, etc. He is responsible for securing microservices, Kubernetes clusters, and applications running in Dockers/Containers. He is familiar with different Python SDKs like boto3, Kubernetes, and Azure for automation and analysis. Praveen also has experience in Azure IAM, AKS, az cli, Azure Policies, Terraform, Jenkins, Chef, CI/CD, helm/helmsman, Vault, OpenID Connect/OAuth2, Kubernetes-AzureAD integration, and RBACs. He has expertise in writing Chef cookbooks for configuration management and web application security using Burp Suite, OWASP ZAP, Veracode, Sonatype, etc. He has also created Kibana (ELK) dashboards from scratch for security analysis. In his previous roles, Praveen has worked as a Director - Product Security and Security Architect | vCISO at Zeta, where he has handled cloud, Docker Kubernetes security, and initiated technical design & product security reviews to ensure product compliance with security best practices and relevant standards. He has also written IT & Cyber Security Policies, developed and implemented compliance programs covering SOC 2 Type 2, scoped, planned, and managed PCI DSS and ISO 27001. Praveen holds a Bachelor of Technology (B.Tech) in Electrical Engineering from the National Institute of Technology Kurukshetra and a Master of Engineering (M.Tech/ ME