Shashank Yerramilli

Experience

• 

  Infosys Technologies Ltd

  Jun 2010 - May 2013

  Systems Engineer

  Developed Aplications on Excel VBADeveloped Applications on .Net Plat form

• 

  Microsoft

  May 2013 - Sept 2023

  • Worked to incorporate the LLM Chat GPT to enhance security analysis of Threat model reviews, to improve which the TM parser is being enhanced to work with blob storage and out put the architecture in plain English to describe it to the AI model.• Performed multiple Threat Model reviews and security consultations and uncovered many security flaws in applications and advised dev teams with mitigations.• Rearchitected and developed an existing portal written in classical ASP into Modern technologies and added many new features and enhanced the overall performance, RBAC model and user experience and enabled rapid iterations for inducting new features.• Coded a data-based e-mailer utility that can be used to create email content curated to specific needs with dynamic data being inserted into the mail from query results.• Auto injected Azure Devops security tasks into the pipeline automatically based on code repos to improve security posture of applications using decorators in ADO.• Migrated all independent Akamai accounts to AD integrated login with no down time to users. Show less Designed and Engineered multiple tools that enabled our Security Team transform from a guidance team to providing Static Analysis as Service to Microsoft Enterprise.Secrets In source - Built and orchestrated tool that scans Microsoft CSEO code base ~60k Branches in mere 8 hours. - Burned down ~3.5 million secrets in code to ZERO in 14 months period by closely working with engineering teams creating a guidance on secure code practices. - Extended the Application to Scan for Secrets in Build and Release pipelines. - The Framework has been reused to plugin multiple tools to run across multiple repositories by different teamsFortify Scan - Built a custom task that can run Fortify scan on Hosted and Hosted VS 2017 agents provided by Azure Devops and saving $10k per month. The Fortify Task published by micro focus in market place needs corp connectivity in our case and hence forcing us to maintain a pool of agents billing my team @$10k per month. - Ensured compliance of all the applications and teams by auto triggering builds that are close to non compliance - Enabled centralized governance by building dashboards for all the metrics requiredIOT devices on Corp (Foundry - Intern project) -Have worked with interns from college to build a tool that catalogues all the devices and monitors IOT devices on the network - Show less

  • Senior Software Engineer

    Mar 2021 - Sept 2023

  • Software Engineer

    Sept 2017 - Mar 2021

  • Consultant

    May 2013 - Aug 2017
• 

  ServiceNow

  Sept 2023 - now

  Staff Security Architect