Subra Kumaraswamy

Subra Kumaraswamy

Experienced Security Practioner

Cupertino, California

For inquiries contact

Press inquiries


Subra Kumaraswamy is the VP of Security Architecture and Engineering has over 25 years of industry experience in product engineering and cybersecurity. He joined Visa in 2015 and leads key initiatives including Product Security Engineering, Application Security, Data protection, Shift-left, Artificial Intelligence for threat management, and next-generation security architecture. Prior to that he has held leadership roles at Apigee (acquired by Google), Intuit, eBay and Sun Microsystems and delivered secure commerce services at Internet scale. Subra is a frequent speaker on the topics of application security, identity, cloud and mobile security In his spare time, Subra researches emerging technologies including cloud computing, social networks to understand the security and privacy implications for users and enterprises. Subra is one of the authors of Cloud Security and Privacy, which addresses issues that affect any organization preparing to use cloud computing as an option. He's a founding member of the Cloud Security Alliance as well as cochair of the Identity & Access Management and Encryption & Key Management workgroups. Subra has a master's degree in computer engineering and is CISSP certified.

Areas of Expertise:

  • security
  • cloud computing
  • privacy
  • compliance
  • governance
  • security strategy
  • security architecture
  • consulting
  • speaking



Webcast - Cloud Security Deep Dive January 20, 2010 In this 90 minute webcast, the three coauthors of Cloud Security and Privacy (recently published by O'Reilly) will take a deep dive into cloud security issues and focus on three specific aspects: (1) data security; (2) identity management in the cloud...
Webcast - Cloud Security & Privacy January 20, 2010 This 75-minute webcast will discuss current issues in cloud computing with regard to security and privacy. The presenters are the three coauthors of a recently published O'Reilly book, Cloud Security and Privacy. In this webcast, they will discuss cloud...
Webcast: Cloud Security & Privacy September 24, 2009 In this webcast, the authors of Cloud Security and Privacy will discuss cloud computing's SPI delivery model.


“This book can be a good resource for people who are planning on cloud computing solutions. ”
— Andy Zhang,
“The authors successfully manage to provide a very helpful overview of the topic...the book will help readers understand cloud security concepts and ideas, as well as expectations for the future. ”
— Kate Barr, Computing Reviews
“Overall this is a surprisingly good book tackling a difficult topic...”
— Sue Gee, I Programmer
“The book is indeed a comprehensive treatise on everything cloud, and everything cloud security...One of the most important things I picked from the book was a very structured view on separation of security responsibilities between the cloud provider and the customer for all of the SPI scenarios. This alone probably justifies getting your own copy. ”
— Dr. Anton Chuvakin,
“...this is a great source of information on a very hot topic du-jour, and the combined experience and expertise of the authors does a lot to bring credibility and added value to this work. It is highly recommended for those that are either currently using, or considering, cloud services for their enterprise in the immediate or very near future.”
— Jude Umeh, FBCS, CITP, BCS
“There are no other books that I know of that attempt to deal with this subject as completely and as comprehensively as does Cloud Security and Privacy. You really do owe it to your organization to read this first in order to be able to ask the right questions. Anything less would be highly negligent on your part. ”
— Thomas Duff, Duffbert's Random Musings