Application Security
Threat modeling, secure design, code review.
$ whoami
Offensive mindset.
Defensive craft.
I'm Amit — Senior Product Security Engineer. I write about finding flaws in design, code, and pipelines before adversaries do. AppSec, DevSecOps, mobile testing, and secure architecture.
hacker-terminal
amit@sec:~$ whoami.sh
> name: Amit Kumar
> role: Senior Product Security Engineer
> focus: AppSec, DevSecOps, Mobile Sec
> status: securing prod (safely)
amit@sec:~$ cat mission.txt
Find it before they do.
amit@sec:~$
// expertise
What I work on
DevSecOps
SAST, SCA, SBOM in CI/CD pipelines.
Mobile Security
Android & iOS AppSec, BugBazaar labs.
Supply Chain
Dependency risk, third-party trust.
Cloud Security
IAM, CSPM, environment hardening.
Threat Modeling
Architecture review, attack surface.
// filter by topic
Core Pillars of SAST
CFG, CDG, and DDG/PDG — what makes static analysis actually work beyond pattern matching.
> Read article
GitHub Actions Overview
How GitHub Actions fits into CI/CD and why workflow security matters.
> Read article
Source Composition Analysis
Dependency risk, SCA tooling, and open-source visibility in pipelines.
> Read article
Supply Chain Security
Trust, third-party deps, and the real impact of software supply chains.
> Read article// series
Article series
Grouped by topic for structured reading.
$ ./connect.sh
Open-source security work
Android BugBazaar, ApkRecon, security labs — built in public on GitHub.