LIJO THOMAS

Product Security Leader with over 14+ years of experience with a shift left approach of driving secure product development, risk management, and incident response across financial services and global retail supply chains. Expert in embedding security into the software development lifecycle (SDLC) through threat modeling, architecture reviews, and integration of SAST/DAST tools within CI/CD pipelines. Adept at applying security frameworks and standards (NIST, OWASP, PCI) to ensure compliance and resilience. Proven track record of leading cross-functional teams, influencing engineering culture, and implementing scalable security strategies that balance innovation with risk reduction. Recognized for building global security awareness programs and aligning product security initiatives with business objectives to accelerate safe, customer-centric growth.

• Mutation Analysis of Magento for Evaluating Threat Model-Based Security Testing, Proceedings of the 3rd IEEE International Workshop on Software Test Automation (STA’11), in conjunction with COMPSAC 2011, Munich, Germany, 07/01/11
• Automated Security Test Generation with Formal Threat Models, IEEE Transactions on Dependable and Secure Computing
• Phishing Detection Using Stochastic Learning-Based Weak Estimators, IEEE Symposium Series on Computational Intelligence, Paris, France, 04/01/11
• Using Gaming Strategies for Attacker and Defender in Recommender Systems, IEEE Symposium Series on Computational Intelligence, Paris, France, 04/01/11