Product Security · Secure Architecture · Security Engineering
I'm Abhishek Pandey, a Product Security Engineer exploring secure architecture, application security, cloud security, and AI security.
01 / Writing
How to use runtime call tracing to prioritize SCA findings, investigate dependency reachability, and reduce unnecessary AI-assisted vulnerability analysis.
02 / Projects
A zero-overhead Python runtime tracer for capturing executed third-party methods to verify SCA reachability.
03 / Video Demonstrations
How a DEK and a KEK work together, what happens when a user changes or forgets a password, and how to rotate keys without re-encrypting everything.
A practical walkthrough of authentication vs authorization, RBAC, and how trusted JWT claims can scope database queries to prevent IDOR and BOLA.
A practical introduction to CVEs, CVSS, CWE, NVD, and vulnerability prioritization using Log4Shell as an example.
04 / Background
My security engineering philosophy is rooted in deep systems thinking: understanding how software behaves under real-world constraints, where architectural assumptions decay, and how to build defense mechanisms that empower engineering teams rather than slowing them down.