Roshan Piyush is the Head of Security Research at Harness, where he leads Harness Security Labs, driving research across application, API, runtime, DevSecOps, and AI security. An OSCP-certified security expert with over 11 years of security research experience, he has built security products and advanced security engineering at Harness, Traceable, Ping Identity, and Oracle.

His expertise spans database security, JVM internals, application and API security, cloud-native security, software supply chain security, and agentic AI systems. His research focuses on how attackers exploit complex execution paths across CI/CD pipelines, software supply chains, cloud-native architectures, and autonomous AI workflows, transforming emerging attack techniques into production-ready security capabilities.

Roshan is the lead of the OWASP crAPI project, has contributed to Coraza WAF, and actively shares his research through conference talks, workshops, and open-source projects. He has presented at DEFCON, OWASP AppSec Goa, API Security meetups, and other industry conferences.