Pooja Garg is a Managing Principal within the Synopsys Software Integrity Group and has been working in the software security industry for over 15 years.
In her current role as a regional manager for the security consulting business, Pooja focuses on management consulting for her customers and has supported them as they grow and mature their software security programs. Pooja plays a critical role in pulling solutions together to address her customers’ unique challenges such as scalable testing capability. During the early years of her consulting career, Pooja performed a variety of application security activities that include, SAST, DAST, web application pen testing and manual code reviews.
How did you land your current role? Was it planned?
I started as an associate security consultant at Cigital after completing my master’s degree program at Northeastern University. Projects I worked on included performing code reviews and penetration testing applications. During my first two years with Cigital, I learned more about the organization and business operations and realised my interests were more on the business side. My manager at this point was supportive of me exploring different roles to nurture and pursue that interest. This paved the path for where I am today. Cigital was acquired by Synopsys in 2016 and I’ve continued following the path which has led me to grow to reach my current role as a managing principal within Synopsys’ Software Integrity Group.
What are the key roles in your field of work, and why did you choose your current expertise?
As a managing principal, my role is to deliver valuable solutions around maturing and enabling our customers’ software security requirements. Our consulting business brings a broad range of experience and expertise to the table – supporting program-level activities or point-in-time needs around penetration testing. My focus is to understand the customer challenges and to then partner with various team members to provide security services leveraging our capabilities to help the customer to overcome or resolve their challenges. Every customer approaches security differently and has unique needs based on their situation. Keeping industry trends and shifts in focus, we are always trying to pull solutions together that enable our customers to develop code with a security-first mindset. Our solution needs to be dynamic and tailored to support their asks. This presents a healthy challenge for me on an ongoing basis and keeps my work both interesting and exciting.
Did you (or do you) have a role model in tech or business in general?
My parents ran a business and, growing up, I saw them work with so much passion and a customer-first mindset. I was genuinely interested in how “stuff” was done. I loved supporting different aspects of the day-to-day work they did, be it reviewing inventory, supporting supplier delivery, etc.
Throughout my career, I can recall hearing hallway conversations between two of my managers and saw similar passion in terms of how we can solve problems and what we can do to bring valuable solutions to life for our customers. I am so fortunate to still be working closely with one of those individuals.
What are you most proud of in your career, so far?
Not giving up. An attitude of “let me work through it and learn from this challenge” has kept me going.
What does an average work day look like for you?
An average day for me is driven by a lot of discussion and collaborating both internally and externally. This may involve many conversations around the underlying details of how we can support the ask.
Are there any specific skills or traits that you notice companies look for when you’re searching for roles in your field?
Listening, challenging the status quo, being curious, among other things.
Has anyone ever tried to stop you from learning and developing in your professional life, or have you found the tech sector supportive?
I am fortunate to be in an environment where individual growth and career development is a core principle. We learn and grow together. I have had some incredible mentors and managers who have provided me with highly valuable guidance and direction.
Have you ever faced insecurities and anxieties during your career, and how did you overcome them?
I came to the U.S. to complete my master’s degree in computer science. Afterward, I started my career as a security consultant at Cigital. Being an introvert, I was a very reserved and quiet person during meetings and discussions. I realised being quiet did not help me in any way. Being in a room with others who had years of experience seemed intimidating. Putting in the time to understand the industry in which I work, staying current, and learning our business has helped me participate in discussions more confidently. Being prepared and well-informed can go a long way.
Entering the world of work can be daunting. Do you have any words of advice for anyone feeling overwhelmed?
Yes, it can be very overwhelming but you’re not alone.
As a new employee, be curious and eager to learn. Be ok with not knowing everything. Typically, at most organizations, your co-workers will appreciate new perspectives and welcome new ideas. I encourage you to talk to others who have been in the industry and at your new workplace.
What advice would you give other women wanting to reach their career goals in technology?
There are a lot of opportunities and many resources.
- Find something that aligns to what you want to do.
- Lean on external and internal resources to gain more knowledge.
- Talk to others that have succeeded in the career path you want to take and discuss their challenges, what worked for them and their retrospective.
- Working with a mentor can go a long way.
