Initializing Secure Connection...

Hi, I'm Dipta Roy

Product Security Specialist

Transforming healthcare and med-tech security through 9+ years of expertise in threat modeling, vulnerability assessments, and FDA compliant technology. Building secure architectures that protect millions of users.

9+
Years Experience
4
Major Companies
10+
GitHub Projects
Dipta Roy - Product Security Specialist
πŸ›‘οΈ Security Expert
πŸ›©οΈ Aerospace
πŸ₯ Healthcare & Med-Tech
Hello! πŸ‘‹

About Me

Passionate about securing the future of healthcare technology

Professional Summary

Product Security Specialist | 9+ Years Protecting Healthcare, Med-Tech & Aerospace

I do the unglamorous but critical work of ensuring complex systems stay secure. From designing resilient architectures to threat modeling and vulnerability assessments, my goal is simple: find the holes and fix them before someone else does.

I have a deep history with regulatory landscapesβ€” FDA, HIPAA, and NIST are my standard operating environments. I’m hands-on with the modern security stack (SAST, SCA/SBOM, BlackDuck, Azure Cloud) and experienced in coordinating penetration tests that yield results, not surprises.

My philosophy? Security shouldn't be an afterthought. I partner with R&D teams to bake security into the development lifecycle from day one, ensuring that large-scale healthcare systems are secure by design, not by accident.

Core Expertise: β€’ Product Security β€’ Compliance (HIPAA) β€’ Threat Modeling β€’ Identity Management β€’ Vulnerability Lifecycle β€’ AI Security

Education

2023

M.Sc. in Computer Applications (CSA)

CHRIST University, Bengaluru

2019

Applied Cybersecurity Essentials

Purdue University

2016

Bachelor of Computer Applications

Bangalore University

Professional Experience

9+ years of building secure systems in critical industries

Stryker

Bengaluru, India
Sep 2024 – Present

Staff Engineer – Product Security

  • Lead product security for AI-powered Med-Tech systems within AI R&D
  • Review software/hardware architecture and embed security from design
  • Conduct comprehensive Threat Modeling and Vulnerability Assessments
  • Use BlackDuck to generate SBOM and evaluate third-party component risks
  • Coordinate FDA submissions with supporting security documentation
  • Facilitate 3rd-party pen testing and lead remediation with dev teams
  • Perform Nessus scans for host-level vulnerability identification
  • Author security documents for medical devices
  • Conduct data privacy assessments aligned with HIPAA and GDPR standards
  • Mentor internal security team and standardize processes via SOPs
AI Security FDA Compliance Threat Modeling SBOM HIPAA GDPR

Siemens Healthineers

Bengaluru, India
Jan 2023 – Sep 2024

Product & Solution Security Expert

  • Performed SAST using Checkmarx, reducing vulnerabilities by 30%
  • Executed SCA to identify risky third-party libraries and licensing issues
  • Conducted infrastructure security scans using Tenable.io
  • Managed patch management including rollouts for released medical software products
  • Conducted threat modeling and trained dev teams on security best practices
  • Authored security documents for medical devices
  • Mentored internal security team and standardized processes via SOPs
Threat Modeling FDA Compliance SAST SCA Patch Management

Collins Aerospace

Bengaluru, India
Mar 2022 – Jan 2023

Lead Engineer – Cybersecurity

  • Developed System Security Plans (SSP) per NIST 800-53 and 800-171
  • Conducted code reviews and guided development teams on remediation
  • Implemented compliance measures across aerospace security systems
  • Mentored internal security team and standardized processes via SOPs
NIST Security Planning

Infosys Ltd.

Bengaluru, India
Nov 2018 – Mar 2022

Senior Systems Engineer – Cybersecurity

  • Led infrastructure vulnerability management for US healthcare clients
  • Remediated SSL/TLS and OS patch issues; managed IDAM controls
  • Automated vulnerability scan reporting and compliance checks
  • Participated in zero-day remediation efforts and patch cycle planning
Vulnerability Management IDAM Automation

Infosys Ltd.

Bengaluru, India
Nov 2016 – Nov 2018

Operations Executive - PMO Analyst

  • Served as a PMO Analyst for a major European Oil & Gas client, leading end-to-end project planning and milestone tracking
  • Coordinated resource scheduling, progress dashboards, and cross-functional team communication
Project Planning PMO Scheduling

Core Competencies

Comprehensive security skillset across the entire SDLC

πŸ›‘οΈ

Security & Compliance

Product Security in Healthcare & Med-Tech
Threat Modeling & Risk Assessment
FDA Regulatory & HIPAA Compliance
Secure SDLC Implementation
πŸ”

Security Testing & Tools

SAST
SCA/SBOM
Vulnerability Management
DAST
☁️

Cloud & Infrastructure

Cloud Security
Patch Management & Infrastructure Security
Security Automation
πŸ’»

Development & Scripting

Python (Security Tooling & Automation)
PowerShell (Windows & Infrastructure Scripting)
Java & PHP (Secure Code Review & SAST Triage)

GitHub Projects

Explore my open-source contributions and personal projects

Software Downloads

Direct download links for my latest tools and applications

Other Projects

A collection of interactive web applications and classic browser games

Certifications & Training

Industry-recognized certifications and continuous learning

Certified Ethical Hacker v9 (CEH)

EC-Council

Qualys Certified Specialist

Qualys

MCP & Azure Infrastructure Solutions

Microsoft

Applied Cybersecurity

Purdue University

Cyber Threats & Attack Vectors

University of Colorado

Rapid Threat Model Prototyping Workshop

Nullcon 2025

Hands-on sessions for agile healthcare & MedTech systems

Publications & Speaking Engagements

πŸ“š

Research Paper

"Using IP Logs to Mitigate DDoS Attacks" - Published in OPTIMA – Journal of Physical Science

🎀

Conference Speaker

SQL Injection Mitigation Techniques - National Conference, Bangalore University

πŸ‘¨β€πŸ«

Guest Trainer

Ethical Hacking & Cybersecurity Best Practices - CHRIST University

Get In Touch

Open to collaboration and new opportunities