Bbarath.ai
About

Hi, I'm Barath.

Staff Product Security AI Engineer at Adobe. 17+ years building secure-by-default platforms — most recently at the intersection of AppSec, AI, and developer workflows.

years in security
17+
years in security
talks & sessions
6
talks & sessions
awards
4
awards
certifications
3
certifications
Barath Subramaniam portrait
Barath SubramaniamSan Jose, CA · Adobe

I've spent the last 17 years working on the unglamorous, load-bearing parts of software security — threat modeling, secure-by-default platforms, identity protection, and the long loop between "we found something" and "the next version of the platform won't let it happen again."

Today most of my work sits at the intersection of application security and AI. AI coding assistants changed the shape of the developer loop, and the security model has to change with it. I lead Project Netra, Adobe's shift-left guardrails for developers building with AI coding assistants, and I publish what I learn so other teams don't have to start from scratch.

Outside of work, I write on Medium, advise the Strategic AI Program at the University of San Francisco, and tinker with multi-agent and RAG patterns on GitHub. This site is where all of that lives in one place.

Experience

17 years, three companies, one thread

Security that ships with the platform instead of chasing it.

See the work
  1. AdobeMay 2020 – PresentSan Jose, CA

    Staff Product Security AI Engineer

    • Project Netra — shift-left security guardrails for AI-assisted development, bringing security feedback into the developer loop early.
    • Built and scaled a “secure blocks” methodology — secure-by-default building blocks that let security coverage scale with the platform.
    • Founded Adobe Cyber Trail (ACT) to turn cross-functional security signals into actionable insight and automated response.
    • Built automated leaked-credential defenses protecting customer accounts against takeover — the subject of my BSidesSF 2025 talk.
    • Lead brand and in-product anti-phishing programs.
    • Threat-modeling SME for identity services.
  2. Macy'sOct 2014 – Apr 2020San Francisco, CA

    Staff Application Security Engineer

    • Instituted enterprise threat modeling for high-risk apps via the Architecture Review Board — eliminating design-level flaws before implementation.
    • Built EPVS (Enterprise Password Verification Service) aligned to NIST SP 800-63B, lowering credential-stuffing risk.
    • Deployed hardened CSP across customer-facing sites, shrinking the client-side attack surface.
    • Built the Integrity Verification Procedure (IVP) — continuous validation of third-party/client-side code, blocking Magecart-style skimming.
  3. InfosysAug 2008 – Oct 2014San Francisco, CA

    Technology Lead

    • Led a team of 5 designing and developing the Item Master web application using Spring MVC, MyBatis, and JMS.
    • Spearheaded user-registration and admin module rollout for 1,250+ new vendors (Walgreens).
Credentials

Certified, recognized, involved

  • CISSP (ISC)²Certification
  • CCSP (ISC)²Certification
  • CompTIA SecurityX (CE)Certification
  • Adobe Security Annual Award (2024) — Own the Outcome & Persistent Partner
  • Adobe Founders Award Nominee (2024)
  • Adobe — Top Digital Learning Resource advocate
  • AI Hackathon Winner — MongoDB GenAI, LangChain Agents & Compound AI, Best Use of LlamaIndex
  • Active member of Cyberpeace Institute
  • Advisor — Strategic AI Program, University of San Francisco, School of Management
Behind the scenes of the Adobe Talent Development & Learning Team shootCamera monitor view from the shoot
Adobe · 2024
Spotlight

Featured by Adobe's Talent Development & Learning Team.

Adobe spotlighted me as one of their Top Digital Learning Resource advocates and invited me to a short interview film about how continuous learning has shaped my career — and how it might inspire others on the same path.

“Learning is not attained by chance; it must be sought for with ardor and attended to with diligence.”
— Abigail Adams · 2nd First Lady of the United States, 1797–1801

On stage

  • Log In Through the Front Door: Automating Defense Against ATOBSidesSF · Conference2025
  • From Shadow AI to Secure Agents: The C.H.A.N.G.E. PlaybookConference2025
  • OWASP Bay Area MeetupBay Area OWASP chapter · Meetup2025
  • M3AAWG 65th ConferenceMessaging, Malware and Mobile Anti-Abuse Working Group · Conference2025
Watch the recordings & all 6 sessions
Education

Where it started

  • Master of Computer Applications (MCA)

    Kumaraguru College of Technology, Tamil Nadu, India

    2005 – 2008Best Outgoing Student Award

  • Bachelor of Computer Applications (BCA)

    KonguNadu Arts and Science College, Tamil Nadu, India

    2003 – 2005Academic Proficiency — 3rd Rank

Building with AI and want it secure by default?

I'm happy to compare notes, speak to your team, or advise on shipping AI features safely.