About

Sandipan Roy is a Product Security Engineer at Red Hat, with over 3 years of experience in identifying and mitigating security vulnerabilities in product development. He has a strong foundation in operating system-level programming and algorithmic security enhancement. Sandipan is passionate about building secure products and takes pride in his ability to identify and address potential security threats before they become a problem. At Red Hat, Sandipan works on a variety of open-source projects and has expanded his skill set to stay up-to-date on the latest security trends and technologies. He is skilled at working with cross-functional teams and has the ability to effectively communicate technical concepts to both technical and non-technical audiences. Sandipan is responsible for processing security erratas and releases for RHEL, performing vulnerability analysis and research, code review, and reporting vulnerabilities to appropriate stakeholders. He collaborates with developers and QA teams to fix security bugs for various Red Hat products. He also resolves security issues and queries from internal and external customer units. Additionally, he coordinates upstream and industry coordination for embargoed security issues, CVEs, process development, etc. Sandipan has previously worked as an Associate Product Security Engineer at Red Hat and a Software Development Engineer at Fedora Project. He has experience in maintaining packages and providing patches, handling Fedora Bugzilla for triage, and contributing to Fedora Security Lab. Sandipan holds a Master of Technology in Computer Science and Engineering from Aliah University, a Master of Science in Computer Science from West Bengal State University, Kolkata, and a Bachelor of Science in Computer Science from the University of Kalyani. His tech stack includes QA, research scientist, Kubernetes, software engineer, and test. Sandipan has 1.44 years of relevant experience and is always looking for new ways to improve his skills and advance his career in the field of product security.