Tajinder Singh

Product Security / Staff Security Engineering

Download PDF

Summary

12+ years across fintech, SaaS and global e-commerce, spanning secure architecture, application security, DevSecOps and AI security. I work with engineering teams to make security part of the way products are designed and shipped. My experience ranges from hands-on API and application security to building secure development programs and leading product security strategy.

Experience

Global Fashion Group

Berlin, Germany

Head of Product Security

Jun 2023 – Present
  • Defined product security strategy across regional platforms and led engineering security initiatives.
  • Established a Security Champions program and reported security posture and remediation trends to senior leadership.
  • Developed threat models and prompt injection testing for LLM-integrated features, and authored internal AI security guidelines.
  • Evaluated application, container and network security tools for the engineering environment.

Senior Security Engineer

Nov 2019 – Jun 2023
  • Integrated SAST, DAST and SCA into CI/CD pipelines across the application portfolio.
  • Conducted threat modelling and secure architecture reviews with product teams.
  • Implemented WAF rules and routed security logs into the SIEM for detection and visibility.

PayTM

Noida, India

Senior Security Engineer

Aug 2016 – Sep 2019
  • Worked with product teams on API security testing, secure authentication and payment security.
  • Integrated static and dynamic analysis into CI/CD pipelines and helped establish secure development practices.
  • Conducted red team exercises against payment infrastructure.

Freshworks

Chennai, India

Security Engineer

Feb 2015 – Aug 2016
  • Assessed the SaaS platform for security vulnerabilities and worked with engineering on remediation.
  • Supported secure development practices and security awareness initiatives.

NT Global

Kigali, Rwanda

Cyber Security Trainer

Jul 2014 – Oct 2014
  • Delivered hands-on security workshops and awareness training for enterprise clients in East Africa.

Selected projects

LLM threat modelling and testing

Developed threat models and prompt injection testing for LLM-integrated features, and wrote internal guidance for secure use of generative AI.

Security in delivery pipelines

Integrated SAST, DAST and SCA into CI/CD pipelines, alongside architecture reviews and risk-based remediation with product and engineering teams.

Dependency inventory for CVE triage

Built an automated dependency inventory across hundreds of repositories using GitHub's SBOM API, cutting supply chain CVE triage from hours of manual searching to minutes.

Skills

Product security
Threat modelling · Secure architecture · API security · Secure SDLC · Design reviews
Security engineering
CI/CD security · SAST · DAST · SCA · WAF · Security automation
AI security
LLM threat modelling · Prompt injection testing · AI application guardrails
Platforms
AWS · Docker · Cloud security · SIEM

Education

Master's in Computer Science and Engineering (M.Tech)

2013 – 2014

Lovely Professional University, India

Thesis on Android app forensics

Bachelor's in Computer Science and Engineering (B.Tech)

2010 – 2013

Lovely Professional University, India

Diploma in Computer Science and Engineering

2007 – 2010

Lovely Professional University, India

Recognition

Google Vulnerability Rewards Program

Bug bounty recognition, 2023

Languages

English · Hindi · Punjabi · German