Upal Kundu
Application Security | Cloud Security (AWS) | DevSecOps | SDLC | CS @ University of Idaho | OPT Eligible
OpenAIUpal is a Senior Computer Science major with a minor in Cybersecurity at the University of Idaho. He has been working across the Software Development Lifecycle (SDLC), supporting different functions within Software.
More
He loves the flexibility and learning curve in IT and values a collaborative environment where teams work together and he can ask for help. He loves joining Technical meetings and Demos! Progression: 2022-23: Worked freelance for 20+ Global clients in Finance, General Business, and delivered custom technical solutions leveraging APIs, Python, JavaScript, AWS, GCP - Delivering Data Analytics and Cloud-Based solutions. Summer 2023: Assisted 2 Software Teams securing Flask APIs, Conducting Static Code Analysis (Node JS) in SNYK and launching new version of mobile application with security (Storage and Login). Fall-Spring 2024: Launched K-12 multiplayer drone simulator application built in Node and Express JS, WebSocket Connectivity between web and mobile platforms and deployed on AWS. Summer 2025: Assisted CISO and Senior Security engineers implement and monitor security alerts in CrowdStrike utilizing SIEM, SOAR, Python for AWS monitoring. Fall-Spring 2025: Lead a team of 5 in implementing Remote Desktop Control solution. Implementation included: Task Management System in AWS (Lambda, SQS, API Gateway), AMD Server Connectivity (Spring Boot, EC2 Linux and Windows Server), Docker for virtualization. Summer 2025: Researched and implemented SDLC Security for FastAPI based micro services deployed with ISTIO on AWS EKS. Worked on connectivity of an array of services: GitHub, Azure DevOps, Jfrog, Xray, OKTA APIs and Mulesoft. Worked with 4+ teams across DevOps, DevSecOps, Software Engineering Micro services. Top Skills: Programming (Python, JavaScript, Java), AWS (EC2, S3, IAM, EKS, Lambda, SQS), Linux, IAM, Cloud Security, Application Security
GTM Index
- OPENAIJOB
- Data Operator2M
Data Operator
OpenAI
- XLAIJOB
- SAAS GTM/Sales2M
SAAS GTM/Sales
XLAI
- UNIVERSITY OF IDAHOJOB
- Accessibility Testing, Ass…2Y 7M
Accessibility Testing, Assistive Technology
University of Idaho
• Complete training on Section 508 Trusted Tester Conformance Test Process Version 5 (TTV5), Homeland Security • Conduct accessibility testing and documentation on UI enterprise applications in compliance with TTV5 framework
- iDrone Intern - Cloud Soft…5M
iDrone Intern - Cloud Software Engineer
University of Idaho
● Coded and deployed on AWS: Multiplayer VR Drone Simulator web application in Javascript A-Frame, Express JS, and WebSocket communication resolving latency by 90%, supporting 10+ users in real-time ● Engineered software for physical drone control programmed with HTML, CSS, JS, ESP32 C3: Webserver
- ALCONJOB
- Digital Platform Security…3M
Digital Platform Security Intern
Alcon
● Automate FastAPI microservice deployments (CI/CD) with Azure DevOps pipelines on AWS EKS, GitHub, and Jfrog, assisting teams in addressing the OWASP top 10 in the API development lifecycle ● Redesign Kubernetes workloads alongside the DevOps engineers by implementing mutual TLS (mTLS) and custom authorization policies, hardening microservices communication within the ISTIO service mesh architecture ● Integrate SAST, DAST, container, and runtime scans in AWS EKS, MuleSoft API Gateway, and Veracode, enhancing SDLC security with a focus on optimizing infrastructure usage and cost efficiency
- HPJOB
- Team Lead (Capstone Project)8M
Team Lead (Capstone Project)
HP
As part of my senior capstone project, I am developing a comprehensive remote PC management solution using AMD Pro CPUs, DMTF/DASH standards, and KVM technology. ● Developed and containerized a Spring Boot API with 10+ REST endpoints, integrating AWS Secrets Manager and PostgreSQL for device verification using Device Security Profile configurations ● Provisioned and configured microservices in AWS EC2, VPC, and Docker for application teams, ensuring seamless and secure communication between Linux and Windows instances while reducing deployment time to under 90 seconds ● Led application migration to AWS, leveraging SQS, Lambda, API Gateway, enabling web and desktop connectivity
- ASSOCIATED STUDENTS OF THE UNIVERSITY OF IDAHO (ASUI)JOB
- Dir of Student Resources5M
Director of Student Resources
Associated Students of the University of Idaho (ASUI)
Work with cross-functional university representatives to raise awareness of available resources, facilitating bi-weekly feedback meetings and developing outreach campaigns Implement feedback system to address student concerns and track progress across internal teams and departments
- INTRADIEMJOB
- Cybersecurity Intern3M
Cybersecurity Intern
Intradiem
● Implemented 7+ CSPM, Vulnerability alerts in Crowdstrike SIEM, SOAR reporting 10+ unique alerts weekly ● Developed automation script in Python to automate AWS Hosts management using Crowdstrike API increasing visibility, reducing cost, and contributing to effectively managing/removing 5% of total hosts ● Created threat intelligence and ISO/SOC2 compliance dashboards for 1000+ AWS hosts, improving security response ● Shadowed security engineers on AWS host vulnerability, IOM remediations utilizing Jenkins, Config, Linux
- EDUREKAJOB
- Cyber Security and Ethical…8M
Cyber Security and Ethical Hacking Internship Program
Edureka
● Validated and optimized Linux security solutions: FTP, Proxy, SSH, IAM, ACL (Access Control List) ● Trained in Burp Suite, Nessus, Metasploit, Server, Firewall with 10+ attack-defense labs in Linux, Windows ● Analyzed 2000+ Network units in Wireshark evaluating 20+ insecure protocols, Data Leak, insecure logins ● Conducted pen-testing on OWASP-Juice shop web app using Kali Linux, and Burp Suite reporting and eliminating 30+ AppSec issues: SQL Injection, XSS, Code Injection, Data Exposure, API security issues
- RESILIENCE, INC. - SOCIAL EMOTIONAL LEARNING PROGRAMSJOB
- Cybersecurity Intern3M
Cybersecurity Intern
Resilience, Inc. - Social Emotional Learning Programs
● Collaborated with Dev, QA teams, pen-tested, and installed patches in DNS, AWS APIs, WordPress access, and Expo File Syatem in Android using Linux, Python, Android Studio eliminating 50%+ misconfigurations ● Utilized Static Code Analysis on React codebase fixing 30+ code-quality, JS library, API credential issues ● Worked with AppDev team to seamlessly integrate GCP SQL Server, streamlining backend API development ● Automated IT ticketing system using Tines SOAR slashing communication time by an average of 8-10 hours
- INTERNATIONAL PROGRAMS OFFICE - UNIVERSITY OF IDAHOJOB
- IPO Assistant3M
IPO Assistant
International Programs Office - University of Idaho
* Created Python program in OpenCV to automatically detect, capture, and post cultural kit items into Excel Database for countries, revamping 100+ country kits into digitized format * Created Web VR interface using JS Aframe, Firebase, and Static Loading to display cultural kit items. * Helped Organize 20+ upcoming events in Excel, developing a structure for easy-to-plan, execute event system
- Job: OpenAI — Data Operator · 2026-08 – present · 0 mo
- Job: XLAI — SAAS GTM/Sales · 2026-08 – present · 0 mo
- Job: University of Idaho — Accessibility Testing, Assistive Technology · 2023-10 – 2026-05 · 2y 7mo — • Complete training on Section 508 Trusted Tester Conformance Test Process Version 5 (TTV5), Homeland Security • Conduct accessibility testing and documentation on UI enterprise applications in compliance with TTV5 framework
- Job: University of Idaho — iDrone Intern - Cloud Software Engineer · 2023-12 – 2024-05 · 5 mo — ● Coded and deployed on AWS: Multiplayer VR Drone Simulator web application in Javascript A-Frame, Express JS, and WebSocket communication resolving latency by 90%, supporting 10+ users in real-time ● Engineered software for physical drone control programmed with HTML, CSS, JS, ESP32 C3: Webserver
- Job: Alcon — Digital Platform Security Intern · 2025-05 – 2025-08 · 3 mo — ● Automate FastAPI microservice deployments (CI/CD) with Azure DevOps pipelines on AWS EKS, GitHub, and Jfrog, assisting teams in addressing the OWASP top 10 in the API development lifecycle ● Redesign Kubernetes workloads alongside the DevOps engineers by implementing mutual TLS (mTLS) and custom authorization policies, hardening microservices communication within the ISTIO service mesh architecture ● Integrate SAST, DAST, container, and runtime scans in AWS EKS, MuleSoft API Gateway, and Veracode, enhancing SDLC security with a focus on optimizing infrastructure usage and cost efficiency
- Job: HP — Team Lead (Capstone Project) · 2024-09 – 2025-05 · 8 mo — As part of my senior capstone project, I am developing a comprehensive remote PC management solution using AMD Pro CPUs, DMTF/DASH standards, and KVM technology. ● Developed and containerized a Spring Boot API with 10+ REST endpoints, integrating AWS Secrets Manager and PostgreSQL for device verification using Device Security Profile configurations ● Provisioned and configured microservices in AWS EC2, VPC, and Docker for application teams, ensuring seamless and secure communication between Linux and Windows instances while reducing deployment time to under 90 seconds ● Led application migration to AWS, leveraging SQS, Lambda, API Gateway, enabling web and desktop connectivity
- Job: Associated Students of the University of Idaho (ASUI) — Director of Student Resources · 2024-09 – 2025-02 · 5 mo — Work with cross-functional university representatives to raise awareness of available resources, facilitating bi-weekly feedback meetings and developing outreach campaigns Implement feedback system to address student concerns and track progress across internal teams and departments
- Job: Intradiem — Cybersecurity Intern · 2024-05 – 2024-08 · 3 mo — ● Implemented 7+ CSPM, Vulnerability alerts in Crowdstrike SIEM, SOAR reporting 10+ unique alerts weekly ● Developed automation script in Python to automate AWS Hosts management using Crowdstrike API increasing visibility, reducing cost, and contributing to effectively managing/removing 5% of total hosts ● Created threat intelligence and ISO/SOC2 compliance dashboards for 1000+ AWS hosts, improving security response ● Shadowed security engineers on AWS host vulnerability, IOM remediations utilizing Jenkins, Config, Linux
- Job: Edureka — Cyber Security and Ethical Hacking Internship Program · 2023-06 – 2024-02 · 8 mo — ● Validated and optimized Linux security solutions: FTP, Proxy, SSH, IAM, ACL (Access Control List) ● Trained in Burp Suite, Nessus, Metasploit, Server, Firewall with 10+ attack-defense labs in Linux, Windows ● Analyzed 2000+ Network units in Wireshark evaluating 20+ insecure protocols, Data Leak, insecure logins ● Conducted pen-testing on OWASP-Juice shop web app using Kali Linux, and Burp Suite reporting and eliminating 30+ AppSec issues: SQL Injection, XSS, Code Injection, Data Exposure, API security issues
- Job: Resilience, Inc. - Social Emotional Learning Programs — Cybersecurity Intern · 2023-05 – 2023-08 · 3 mo — ● Collaborated with Dev, QA teams, pen-tested, and installed patches in DNS, AWS APIs, WordPress access, and Expo File Syatem in Android using Linux, Python, Android Studio eliminating 50%+ misconfigurations ● Utilized Static Code Analysis on React codebase fixing 30+ code-quality, JS library, API credential issues ● Worked with AppDev team to seamlessly integrate GCP SQL Server, streamlining backend API development ● Automated IT ticketing system using Tines SOAR slashing communication time by an average of 8-10 hours
- Job: International Programs Office - University of Idaho — IPO Assistant · 2023-05 – 2023-08 · 3 mo — * Created Python program in OpenCV to automatically detect, capture, and post cultural kit items into Excel Database for countries, revamping 100+ country kits into digitized format * Created Web VR interface using JS Aframe, Firebase, and Static Loading to display cultural kit items. * Helped Organize 20+ upcoming events in Excel, developing a structure for easy-to-plan, execute event system
- School: University of Idaho — Bachelor's degree, Computer Science, Cybersecurity (Minor)
Skills
Playbooks
All playbooks →No playbooks indexed for this profile yet.
More GTM Engineers
Browse all →- Iftikhar ChaudhryGTM Strategy, Pricing & Operations Leader | Monetization Strategy, Commercial Model Innovation & AI-Powered Revenue Transformation | 25+ Years Enterprise SaaSOpenAI
ex-ServiceNow – The Enterprise Cloud Company
- Perkin KothariDriving Revenue Growth & Enabling Sales Teams to Succeed | Global GTM Builder at PeopleStrong | B2B | Enterprise SaaS Growth Architect | HR Tech | HubSpot Specialist | Clay Expert | Martech | Growth 📈
PeopleStrong
- Ashraf SheikhVP Commercial | VP Sales | Enterprise Growth | AI | Enterprise Software | SaaS | Cloud | Cybersecurity | GTM | Strategic Partnerships | Revenue Growth | Executive Leadership | UAE | GCC
MetaAll (Meta AGI Alliance)
ex-Etisalat
- Angel BrodinGTM @ OpenAIOpenAI
ex-Outreach.io
