- Member Interview
Member Spotlight: Hemant Shah
Hemant is a strong advocate of “shift left” in the industry. His software developer training and background allow him to speak the developer’s language in managing AppSec programs and helps the development team understand the value and impact of delivering secure software. In addition to sharing his expertise in the Veracode products and helping other users in the Community solve problems, Hemant often brings his development and security perspectives into discussions that bridge the knowledge gap for many.
Learn more about Hemant and his passion for “shift left” in this recent interview:
About Your Experience with Veracode & Community
Profession: What is your current role and what are your responsibilities in your company?
I’m currently working as Security Architect. As a Security Architect, I’m responsible for driving our AppSec program, implementing the security best practices into our software development process with the goal to “shift-left” security into SDLC. As my role demands, I’m driving SAST and DAST scans to identify the security issues early in the development stage. In part, I do a review of HLD/HLR to identify security flaws in the architecture of the application for both on-premises and cloud solutions.
Which Veracode product(s) do you use? What problems were you trying to solve and how did the product(s) help you achieve your goals?
As mentioned previously, we are using SAST and DAST from Veracode to identify security flaws/vulnerabilities early in the development phase. We try to implement Veracode SAST analysis from the beginning of developing the source code via automation.
When did you join the Veracode Community? What motivates you to contribute to the Community?
Well, I’m not sure when exactly I joined the community. But I joined the Community first to find solutions to the problems I was having, and I stay to learn best practices of how others are implementing and exchanging the knowledge through discussions. I also like the Community platform that listens to the Community members in the form of Ideas to make the Veracode products more useful.
About You
What’s the first thing you plan to do when the pandemic ends?
Without a doubt, I will plan a Thailand visit with family, which I needed to cancel in March 2020 because of the pandemic.
Can you share with us a favorite podcast, movie, song, blog, or book? We’re all about finding something new and interesting to listen to/watch/read :)
I’m not much of a movie/book lover. I do like to listen to some Hindi Sufi songs, Gazal’s when I’m stressed or before working on a critical thing. Otherwise, I’m more likely to do traveling and explore different places.
Learn more about Hemant and his passion for “shift left” in this recent interview:
About Your Experience with Veracode & Community
Profession: What is your current role and what are your responsibilities in your company?
I’m currently working as Security Architect. As a Security Architect, I’m responsible for driving our AppSec program, implementing the security best practices into our software development process with the goal to “shift-left” security into SDLC. As my role demands, I’m driving SAST and DAST scans to identify the security issues early in the development stage. In part, I do a review of HLD/HLR to identify security flaws in the architecture of the application for both on-premises and cloud solutions.
Which Veracode product(s) do you use? What problems were you trying to solve and how did the product(s) help you achieve your goals?
As mentioned previously, we are using SAST and DAST from Veracode to identify security flaws/vulnerabilities early in the development phase. We try to implement Veracode SAST analysis from the beginning of developing the source code via automation.
When did you join the Veracode Community? What motivates you to contribute to the Community?
Well, I’m not sure when exactly I joined the community. But I joined the Community first to find solutions to the problems I was having, and I stay to learn best practices of how others are implementing and exchanging the knowledge through discussions. I also like the Community platform that listens to the Community members in the form of Ideas to make the Veracode products more useful.
About You
What’s the first thing you plan to do when the pandemic ends?
Without a doubt, I will plan a Thailand visit with family, which I needed to cancel in March 2020 because of the pandemic.
Can you share with us a favorite podcast, movie, song, blog, or book? We’re all about finding something new and interesting to listen to/watch/read :)
I’m not much of a movie/book lover. I do like to listen to some Hindi Sufi songs, Gazal’s when I’m stressed or before working on a critical thing. Otherwise, I’m more likely to do traveling and explore different places.
Have a question?
Ask our Community of Veracode product experts and AppSec leaders.
.png)