| layout | title |
|---|---|
default |
About |
Pushkar Joglekar is a Sr. Cloud Security Engineer II currently working at Credit Karma. He is also a Kubernetes security maintainer.
Since 2019, he feels incredibly fortunate to have written the security chapters in Nigel Poulton’s “The Kubernetes Book” which he looks forward to updating every year. Prior to this current role, he worked on securing massive Kubernetes deployments at Visa (End User) and VMware Tanzu (Service Provider), playing a dual role of a security architect and engineer. He is also the co-creator of award winning container runtime security tool: MASHUP
In his free time, he loves taking photos, watching cricket and firmly believes that Chai fixes everything!
Pushkar is based in San Francisco Bay Area!
Cloud Security Engineering (Oct 2022 - Present)
- Sr. Cloud Security Engineer II
- Design, Develop and Maintain cloud native security solutions, frameworks and platforms
- Technical Lead for driving cross-org collaboration to reduce risk & improve security posture of our Google Cloud footprint
- One of the trusted senior engineers responsible for secure design reviews of GenAI and Data Security usecases
- Among Top 1-2% contributors worldwide since inception
- SIG (Special Interest Group) Security
- Associate Security Response Committee Member (May 2022 - Feb 2023)
- Among Top 2-3% contributors worldwide since inception
- TAG (Technical Advisory Group) Security
- Program Committee
Kubernetes Upstream Engineering (March 2021 - October 2022)
- Sr. Security Engineer → Staff Security Engineer
- Working across Product, Compliance, and Engineering teams to move security left and up by balancing customer escalations with opensource contributions that enhance security posture of downstream products
Security Architecture & Engineering (June 2015 - March 2021)
- Information Security Analyst → Sr. Cybersecurity / Staff Engineer → Manager
- Dual role of architect and engineer lead for securing containers, secrets and devops:
- Led a team of 3-4 engineers building award winning container security product
- Designed secure by default container platforms processing millions of transactions per day
- Evangelized security topics via online/in-person speaking engagements from executives to developers
- Deployed Secrets Mgmt. system with 99.999% availability serving 100+ apps
- Dual role of architect and engineer lead for securing containers, secrets and devops:
- Graduate Degree (MS) in Information Technology - Information Networking Institute (Aug 2013 - May 2015)
- Graduate Teaching Assistant (Aug 2014 - May 2015)
- Associate Software Engineer - Payments (June 2011 - July 2013)
- Worked on Development, Testing and Documentation for Mobile and Retail Payments applications
- Mentored 4 new graduate engineers to set them up for success in a month from joining the team
- (13 Citations) Systems and Methods for generating behavior profiles for new entities
- (30 Citations) Self-learning alerting and anomaly detection in monitoring systems
- (21 Citations) Microservice adaptive security hardening
- (13 Citation) Real-time entity anomaly detection
- (23 Citations) Model shift prevention through machine learning
- (75 Citations) Systems and methods to secure api platforms
- (5 Citations) Proactive defense of untrustworthy machine learning system
- (2 Citations) Systems, Methods, and Computer Program Products for Authorizing a Transaction
Note: 6 granted, 2 pending
- Google Open Source Peer Bonus Award 2022: Kubernetes and CNCF
- Kubernetes Community Awards 2021: Security
- CSO50 2019: Next Generation Security Product Award
- CMU INI 2015: Outstanding Student Service Award for Teaching Assistant
- Amazon Book Rating: 4.5/5 (1200+ reviews)
- Wrote both security chapters
- 20 Google Scholar Citations
- Updates to the Auto-refreshing Official CVE Feed, April 2023
- Current State: 2019 Third Party Security Audit of Kubernetes, Oct. 2022
- Implementing the Auto-refreshing Official CVE Feed, Sept. 2022
- Announcing the Auto-refreshing Official CVE Feed, Sept. 2022
- A Closer Look at NSA/CISA Kubernetes Hardening Guidance, Oct. 2021
- Cloud Native Security for your Clusters, Nov. 2020
- References:
- Tutorials:
- Task: Verifying Signed Images
- Version 2.0, May 2022
- Media Coverage:
- Version 1.0, Nov. 2020
- Audio version
- Citations:
- Media Coverage:
- Translations:
- SIG (Special Interest Group): Best Practices for Container Orchestration
- New Information Supplement: Guidance for Containers and Container Orchestration Tools
- CNCF Blog: Announcing the Refreshed Cloud Native Security Whitepaper, May 2022
- How to become a Cloud Native Security Engineer: Cloud Security Podcast, April 2022
- VMware Open Source Blog: Upstream: Jump on In, the Water’s Fine!, Dec. 2021
- Skedler: Navigating the messy world of (too many) CVEs, Nov. 2021
- Storychief: Catch up with Security SIG from KubeCon, Oct. 2021
- CSOOnline: How Visa Built its Own Container Security Solution, March 2020
- ItOpsTimes: Securing Kubernetes with STRIDE, Nov. 2019
- Episode 187 "Kubernetes Release - Image Signing MVP", March 2022
- Episode 174 "Verifying Signed Images with Connaisseur", Nov. 2021
- Episode 171 "Pod Security Problems", Oct. 2021
- North America 2023
- North America 2022
- Acceptance rate: 11% , 166 / 1526 submissions
- Detroit, Michigan, USA, Oct 24-28
- Europe 2022
- Acceptance rate 12% , 148 / 1187 submissions
- Valencia, Spain, May 16-20
- North America 2021
- North America 2019
- Acceptance rate: 12% , 211 / 1800 submissions
- San Diego, CA, USA, Nov 15-21