Author Image

Hi, I am Maity

Soumyo Maity, PhD

Distinguished Member of Technical Staff at Dell Technologies

A diligent and skilled information security expert and an industry leader with a successful background and an exceptional academic record. 12+ years of experience in working with leading brands and esteemed institutes. Coauthored more than 16 international research articles, couple of patens and a book chapter. Also, a seasoned speaker in various info sec forums and universities. Enjoys being part of a successful and productive team and thrives in working pressurized and challenging environments.

Certified Defensible Security Architect
Certified Information Security Professional
Certificate of Cloud Security Knowledge v.4
Certfied Ethical Hacker v.9
Security Development Lifecycle
Threat Modeling

Recent Posts

Card image cap
Security Information and Event Management (SIEM)

Security information and event management (SIEM) is a security solution that collects, aggregates, and analyzes security logs and events from across an organization’s IT infrastructure. SIEM solutions can be used to identify threats, investigate security incidents, and improve overall security posture. SIEM solutions typically collect data from a variety of sources, including: Network devices, such as firewalls and switches Security devices, such as intrusion detection systems (IDS) and intrusion prevention systems (IPS) Servers Endpoint devices, such as laptops and desktops Applications Once data is collected, SIEM solutions aggregate it and analyze it for suspicious activity.

April 3, 2023 Read
Card image cap
Application Security Monitoring

Application security monitoring is the process of continuously tracking and analyzing applications for security vulnerabilities and threats. It is an essential part of any organization’s overall security program. There are a number of benefits to implementing application security monitoring, including: Early detection: By continuously monitoring applications, organizations can detect security vulnerabilities and threats early, before they can be exploited. Reduced risk of data breaches: By detecting and remediating security vulnerabilities early, organizations can reduce the risk of data breaches.

March 27, 2023 Read
Card image cap
Application security for system administrators

As a system administrator, you play a critical role in the security of your organization’s applications. You are responsible for managing the systems that applications run on and for protecting those systems from attack. Here are some key things to keep in mind when it comes to application security: Applications are a target: Applications are a valuable target for attackers. They can be used to steal data, disrupt operations, or even launch attacks on other systems.

March 7, 2023 Read
Card image cap
Embedded Systems Security

Embedded systems are everywhere. They control our cars, our homes, and our businesses. They are also increasingly connected to the internet, which makes them vulnerable to attack. Embedded systems security is the practice of protecting embedded systems from unauthorized access, modification, or destruction. It is a critical aspect of information security that is essential for protecting the confidentiality, integrity, and availability of embedded systems. There are a number of threats to embedded systems security, including:

February 8, 2023 Read
Card image cap
Software Composition Analysis (SCA): A Deep Dive

Software Composition Analysis (SCA) is a process for identifying and assessing security vulnerabilities in the open source components used to build software applications. SCA can be used to identify vulnerabilities in both third-party and in-house developed components. SCA is a critical tool for protecting software applications from security vulnerabilities. By identifying and addressing vulnerabilities in open source components, SCA can help to prevent attackers from exploiting these vulnerabilities to gain unauthorized access to applications and systems.

January 20, 2023 Read
Card image cap
Application Security Governance

Application security governance is the process of establishing and maintaining a set of policies, processes, and controls to ensure the security of applications. It is an essential part of any organization’s overall security program. There are a number of benefits to implementing application security governance, including: Reduced risk of data breaches: By implementing security controls and processes, organizations can reduce the risk of data breaches. Improved compliance: Organizations that implement application security governance can help to comply with security regulations, such as PCI DSS and HIPAA.

January 13, 2023 Read

Skills

Experiences

1
Dell Technologies

March 2021 - Present, Bangalore, India

Dell is a multinational technology company that designs, develops, manufactures, sells, and supports personal computers, servers, data storage devices, networking equipment, software, and information security solutions. It is one of the largest technology companies in the world.

Distinguished Member of technical Staff

March 2023 - Present

  • Product Owner of SDL Control Catalog, SDL Assessments, SDL Standards and Security Verification
  • Leading Open Source Security Projects
  • Design, develop and manage secure software development process
  • Research on AI-powered cybersecurity
  • Exploration on security and privacy concerns on AI models
Senior Principal Engineer

March 2021 - March 2022

  • Do Project Owner of SDL Control Catalog, SDL Standards and Security Verification
  • Leader in Secure Development Strategy Team
  • Leader in Industry Collaboration
Principal Engineer

March 2021 - March 2018

  • SDL advisor to different products and applications developed by Dell Technologies and RSA
  • Threat Model expert
  • Process owner of Secure coding drive and Security Analysis
  • Awarded as Gamechanger of 2020
Industry Mentor and Guest Faculty
REVA university

July 2019 - Present, India

REVA University is one of the Best colleges in Bangalore, Karnataka offering many courses specializing in Engineering, Law, Management, and other.

2
3
Principal Software Engineer
OpenText

February 2017 - March 2018, Bangalore, India

OpenText is a global enterprise software company that provides solutions for managing information and improving operational efficiency. OpenText is a leading provider of enterprise information management software.

Responsibilities:
  • Product security analyst and consultant for different products of Enterprise Content Division (Documentum, LEAP, InfoArchive etc.).
  • Process integration for Security Engineering across ECD
  • Lead in product security assurance program for ECD products
Associate Principal Engineer
EMC Corporation

November 2014 - February 2017, India

EMC^2 was provider of products and services related to cloud computing, storage, big data, data analytics, information security, content management and converged infrastructure. It was Aquired by Dell in 2016

Responsibilities:
  • Product security advisor for different products of Enterprise Content Division (Documentum).
  • Implemented security development lifecycle for Enterprise Content Division
  • Managed different VA and PT activities for the products
4
5
Chief Engineer
Samsung Electronics

October 2013 - September 2014, India

Samsung is a South Korean conglomerate that is one of the world’s largest manufacturers of electronics, including smartphones, televisions, and home appliances.

Responsibilities:
  • Team-leader for a project on designing protocols of high-bandwidth digital content protection in security team of service platform group.
  • Reviewed patents and research articles on networks and security on behalf of Samsung Research Institute, Delhi.
  • Awarded as the proposer of the best idea for innovation in 2014.
  • Part of a project on secured streaming on cloud and server solution team of B2B group.

Education

Indian Institute of Technology Kharagpur
2009-2015
Ph.D in Information Technology
Publications
Institute of Engineering and Management, Kolkata
2004-2008
B.Tech in Computer Science & Engineering
CGPA: 8.6 out of 10
Extracurricular Activities
  • President of Programming Club 2007
  • Winner Best Student Project Award in 2008
  • Organizer, TechFest 2008
Jodhpur Park Boy's School, Kolkata, India
2002-2004
Higher Secondary School Certificate(12+)
percentage: 84 out of 100
Behala Aryya Vidyamandir, Kolkata, India
1996-2002
Secondary School Certificate
percentage: 89 out of 100

Publications