Suraj Hipparge

Product Security Manager

Oct. 2025 - Present

Kubed Root, New York

Key Responsibilities:

• Integrated security requirements across the SDLC by implementing robust controls from design through release, ensuring alignment with CIS, COBIT, NIST, ISO and industry best practices while collaborating cross-functionally to own risk management through comprehensive assessments.
• Directed engineering teams in secure coding, application security architecture, configuration management, IAM, and security automation, supporting the delivery of scalable, compliant, and resilient cloud applications.
• Drove proactive threat modeling, security controls evaluation and vulnerability management to minimize attack surfaces, remediate product risks, and sustain both regulatory and client compliance.

CyberSecurity and AI Consultant- Graduate Research Assistant

Mar. 2025 - Jun.2025

Cyber Clinic (UBCATT AI Fellowship), University at Buffalo, The State Univerisity of New York

Key Responsibilities:

• Co-founded a cyber clinic to develop an AI tool, providing pro-bono security assessments & strategic recommendations to small businesses to enhance their risk management & overall security posture.
• Engineered an AI RAG tool to automate multi-framework security assessments (NIST, ISO 27001), generating SOC style report & phased implementation plans by translating complex technical findings into clear, business-relevant insights for client leadership.
• Spearheaded the creation & updating of risk mitigation strategies, IR plans, & SOPs for clients.

Information Security Architect- Supervised Research Assistant

Jan. 2024 - Oct. 2025

University at Buffalo, The State Univerisity of New York

Key Responsibilities:

• Designed and implemented secure architecture for AI-based Patient Navigator Application
• Developed a secure cloud environment and database, conducted security testing on AI models.
• Authored & published a research paper on a Novel IAM method to mitigate AI threats to sensitive patient data (PHI/PII).
• Presented the research at NYS Cyber Security Conference (Annual Symposium on Info Assurance) in data privacy & AI track.

Software Security Engineer (Cloud Platform Security)

Oct. 2021 - Jun. 2024

Druva - Pune, MH, India

Key Responsibilities:

• SIEM & Threat Detection: Managed and tuned SIEM platforms (Splunk, Coralogix) by developing custom correlation rules and automated alerts, enhancing threat detection accuracy for SOC teams. Conducted in-depth analysis of telemetry logs and system artifacts to differentiate false positives from actual threats.
• Incident Response & Triage: Acted as a lead for high-priority incident investigations, mitigating over $150K in product security risk by proactively identifying zero-day bugs and performing root cause analysis on intrusion attempts and production anomalies.
• Phishing & Risk Assessment: Conducted NIST RMF privacy controls assessments and internal phishing simulations, analyzing malicious vectors to identify social engineering attacks and harden the organization's defensive posture.
• Automation & Efficiency: Designed and implemented Python-Selenium automation suites for continuous security testing, boosting compliance-as-code initiatives and improving regression testing efficiency by over 30% within the SDLC.
• Operational Stability & Cloud: Managed AWS cloud environments and optimized Jenkins pipelines to support 48 releases and 25 hotfixes, reducing internal service requests by 50% through the creation of comprehensive technical documentation and knowledge-base articles (Confluence).
• Leadership & Training: Recognized with a SPOT Award and the title of ‘Team Security Champion’ for guiding development teams on OWASP Top 10 best practices, integrating security training into new hire onboarding to foster a culture of secure coding.

IoT Systems Engineer Intern

Jul. 2019 - Aug. 2019

ELSEIF Technologies

Key Responsibilities:

• Customer-Centric Solutions: Coordinated with customers for feedback to drive product improvements and developed proof-of-concept solutions. Designed and optimized PCBs for various IoT devices, enriching product functionality and performance.

IoT Based Smart Fire Extinguisher (Team Lead)

Nov.2019 - Feb. 2020

IoT Based Smart Fire Extinguisher (Team Lead) Nov. 2019 - Feb. 2020 International Engineering Research Journal (Special Issue on NCIET 2020) Pages 372-374

Developed an advanced fire safety system integrating flame sensors and an automated controller, improving safety with rapid response mechanisms. Published in the Special Issue of NCIET 2020

Masters of Science, Management Information Systems ( STEM )

Jul.2024 - Jun. 2025

State University of New York at Buffalo, NY, USA

Course Modules

1. CyberSecurity Analytics (Splunk)
2. CyberSecurity, Privacy & Ethics
3. Information Assurance
4. Adopting Generative AI
5. Digital Product Management
6. System Analysis and Design
7. Technology and Innovation Management
8. Predictive Analytics
9. Experential IT Project Management
10. Database Management Systems

Post Graduate Diploma, Big Data Analytics & Machine Learning

May 2021 - Sep. 2021

Center for Development of Advanced Computing, Pune, MH, India

Courses Modules

1. Python & R Programming
2. Data Collection & Database Management Systems
3. Cloud Computing
4. Big Data Technologies
5. Practical Machine Learning
6. Data Visualization- Analysis & Reporting

Bachelor of Engineering, Electronics & Telecommunications

Aug. 2015 - Jun. 2020

Pune University, MH, India