02 / About

Building the sound of security.

I'm Sma Das, an application security engineer at Warner Music Group in New York. I work across product security, offensive testing, DevSecOps, and the systems that turn findings into action.

LinkedIn GitHub

Sma Das at Warner Music Group — New York, NYSecurity / Software

Experience

Where I've worked

Warner Music Group

Current

Security Engineer II

Mar 2024 - Present
New York, NY

›Founded the Application Security program, reducing critical vulnerabilities by ~75% across systems processing $7B annually
›Architected end-to-end DevSecOps ecosystem integrating SAST, secret scanning, automated DAST, and security-as-code pipelines
›Built multi-tenant risk management platform unifying data from Wiz, Cisco Umbrella, GitHub, Ionix, and Rapid7

Google

Security Engineer Intern

Aug 2023 - Jan 2024
New York, NY

›Part of the $20M Cybersecurity Clinic Initiative safeguarding critical U.S. infrastructure
›Accelerated vulnerability patching by 32% through automated workflow improvements
›Built multi-threaded Python pipelines to process security event data in real-time

IBM

Security Engineer Intern

May 2023 - Aug 2023
New York, NY

›Minimized sensitive data exfiltration by 12% through weekly data privacy reviews
›Gained expert-level understanding of offensive cybersecurity and defensive integrations
›Performed threat analysis using Machine Learning and AI for detailed threat models

TryHackMe

Penetration Tester Intern

May 2021 - Dec 2021
Remote

›Created pentesting boxes and vulnerable environments that trained 1M+ users in cybersecurity
›Performed vulnerability assessments on existing machines and built VMs to simulate attack scenarios
›Leveraged the platform extensively to develop hands-on penetration testing skills

02 / About

Building the sound of security.

I'm Sma Das, an application security engineer at Warner Music Group in New York. I work across product security, offensive testing, DevSecOps, and the systems that turn findings into action.

LinkedIn GitHub

Experience

Where I've worked

Warner Music Group

Current

Security Engineer II

Mar 2024 - Present
New York, NY

›Founded the Application Security program, reducing critical vulnerabilities by ~75% across systems processing $7B annually
›Architected end-to-end DevSecOps ecosystem integrating SAST, secret scanning, automated DAST, and security-as-code pipelines
›Built multi-tenant risk management platform unifying data from Wiz, Cisco Umbrella, GitHub, Ionix, and Rapid7

Google

Security Engineer Intern

Aug 2023 - Jan 2024
New York, NY

›Part of the $20M Cybersecurity Clinic Initiative safeguarding critical U.S. infrastructure
›Accelerated vulnerability patching by 32% through automated workflow improvements
›Built multi-threaded Python pipelines to process security event data in real-time

IBM

Security Engineer Intern

May 2023 - Aug 2023
New York, NY

›Minimized sensitive data exfiltration by 12% through weekly data privacy reviews
›Gained expert-level understanding of offensive cybersecurity and defensive integrations
›Performed threat analysis using Machine Learning and AI for detailed threat models

TryHackMe

Penetration Tester Intern

May 2021 - Dec 2021
Remote

›Created pentesting boxes and vulnerable environments that trained 1M+ users in cybersecurity
›Performed vulnerability assessments on existing machines and built VMs to simulate attack scenarios
›Leveraged the platform extensively to develop hands-on penetration testing skills