┌─────────────────────────────────────────────────────────────┐
│ │
│ Hi, I'm Ritiesh Bhatia 👋 │
│ │
│ 🔐 Application Security Engineer │
│ 🛡️ Cybersecurity & DevSecOps │
│ ⚙️ Security Automation & CI/CD │
│ ☁️ Cloud & Infrastructure Security │
│ │
│ I build security into the software development lifecycle │
│ instead of waiting until the application reaches │
│ production. │
│ │
└─────────────────────────────────────────────────────────────┘
Currently working as an Executive at Tata Advanced Systems Limited in Application Security, focusing on integrating security into development and CI/CD workflows.
My work revolves around:
- 🔎 SAST — Static Application Security Testing
- 📦 SCA — Software Composition Analysis
- 🌐 DAST — Dynamic Application Security Testing
- 🧪 Secure Code Review
- ⚙️ DevSecOps & CI/CD Security
- 🤖 Security Automation
- 🛡️ Vulnerability Management
- ☁️ Cloud & Infrastructure Security
- 🔐 Application & API Security
Tata Advanced Systems Limited
Application Security
│
├── SAST ───────────────► Source Code Security
│
├── SCA ────────────────► Dependency Security
│
├── DAST ───────────────► Runtime Security
│
├── Secure Code Review ─► Manual Analysis
│
└── DevSecOps ──────────► Security Automation
│
▼
CI/CD Integration
🔎 What I Work With
Application Security
- SAST
- DAST
- SCA
- Secure Code Review
- Vulnerability Assessment
- False Positive Analysis
- Remediation Guidance
- OWASP-based security testing
DevSecOps
- CI/CD security integration
- Jenkins
- Security automation
- Automated vulnerability scanning
- Pipeline security
- Security gates
Security Tooling
- HCL AppScan
- Burp Suite
- Checkmarx
- Semgrep
- OWASP Dependency-Check
- Nexus
- Nmap
Infrastructure
- Linux
- Docker
- Kubernetes
- AWS
- Networking fundamentals
- Infrastructure security
┌─────────────────────┐
│ APPLICATION SEC │
└──────────┬──────────┘
│
┌──────────────────┼──────────────────┐
▼ ▼ ▼
SAST SCA DAST
│ │ │
Source Code Dependencies Running App
│ │ │
└──────────────────┼──────────────────┘
▼
Vulnerability Mgmt
│
▼
Secure SDLC
│
▼
DevSecOps
│
┌───────────┴───────────┐
▼ ▼
CI/CD CLOUD
│ │
Jenkins AWS
│ │
└───────────┬───────────┘
▼
Security Automation
⚙️ DevSecOps Security Pipeline
Building security-focused CI/CD pipelines integrating:
Developer
│
▼
Git
│
▼
CI/CD Pipeline
│
├──── SAST
│
├──── SCA
│
├──── Secret Detection
│
├──── IaC Security
│
└──── Container Security
│
▼
Security Gate
│
┌─────┴─────┐
▼ ▼
PASS FAIL
│ │
▼ ▼
Deployment Remediation
☁️ Cloud Security
Currently expanding into:
- AWS IAM
- VPC security
- Security Groups
- CloudTrail
- GuardDuty
- Security Hub
- AWS Inspector
- Container security
- Kubernetes security
- Infrastructure as Code security
🔍 Application & API Security
Areas of interest:
- OWASP Top 10
- OWASP API Security Top 10
- Authentication & Authorization
- JWT security
- SQL Injection
- XSS
- SSRF
- IDOR / BOLA
- API security testing
- Burp Suite
- Threat Modeling
Android Development
│
▼
Java / Kotlin
│
▼
Software Development
│
▼
Cybersecurity
│
▼
Application Security
│
▼
SAST / DAST / SCA
│
▼
DevSecOps
│
▼
Cloud & Infrastructure Security
│
▼
Security Engineering
From building applications → to securing them → to securing the pipelines that build them.
| Area | Focus |
|---|---|
| 🔐 AppSec | SAST · DAST · SCA · Secure Code Review |
| ⚙️ DevSecOps | CI/CD · Jenkins · Security Automation |
| 🌐 API Security | REST APIs · JWT · OWASP API Top 10 |
| ☁️ Cloud Security | AWS · IAM · VPC · Security Services |
| 🐳 Container Security | Docker · Kubernetes |
| 🏗️ IaC Security | Terraform · Infrastructure Security |
| 🧠 Security Engineering | Threat Modeling · Secure SDLC |
🔐 Application Security
- OWASP Top 10
- Secure Coding
- SAST
- DAST
- SCA
- Vulnerability Management
- Secure Code Review
- Threat Modeling
- Secure SDLC
🌐 Web & API Security
- HTTP / HTTPS
- REST APIs
- Authentication
- Authorization
- JWT
- SQL Injection
- XSS
- SSRF
- IDOR / BOLA
- Business Logic Testing
- OWASP API Security Top 10
☁️ Cloud & Infrastructure
- AWS
- IAM
- VPC
- Security Groups
- CloudTrail
- GuardDuty
- Security Hub
- Inspector
- Docker
- Kubernetes
- Terraform
```