Sagnik Haldar

Led end-to-end penetration testing of SaaS applications and APIs, developed security automation scripts, and integrated security tools into CI/CD pipelines.

• Led end-to-end penetration testing of SaaS applications and APIs, uncovering 10+ critical vulnerabilities leading to a 25% reduction in the overall attack surface
• Developed robust security automation scripts in Python and Bash, enhancing SAST and SCA tools effectiveness, resulting in 60% boost in scan accuracy and 50% reduction in false positives
• Integrated GitGuardian into CI/CD pipelines to detect hardcoded secrets, improving secret detection coverage across all repositories by 90%
• Collaborated cross-functionally with product and DevOps teams to enforce security best practices in architecture design and code

Performed targeted manual penetration testing on SaaS platforms, enforced secure coding standards, and optimized vulnerability scanning workflows.

• Performed targeted manual penetration testing on SaaS platforms and APIs, uncovering critical misconfigurations aligned with OWASP Top 10
• Enforced secure coding standards across 30+ web application modules, achieving 30% reduction in high and medium-risk vulnerabilities over six months
• Optimized vulnerability scanning automation workflows, cutting manual intervention and reducing monthly operational costs by 25%
• Integrated SAST and SCA tools seamlessly into SDLC, improving detection accuracy by 85% and reducing security debt

Led vulnerability assessments, enhanced SAST accuracy, and built centralized secure coding knowledge base.

• Led scheduled vulnerability assessments (weekly and monthly), identifying critical weaknesses across infrastructure and application layers
• Enhanced Checkmarx SAST accuracy by 50% by writing custom queries, significantly reducing false positives in secure code scans
• Built a centralized secure coding knowledge base with 100+ best practices adopted by 7+ engineering teams
• Collaborated cross-functionally to triage security vulnerabilities, accelerating remediation by 40% and reducing repeat issues by 30%