Headline

Security at Scapia

About

I build and scale security programs in high growth fintech companies, with a focus on making security work with engineering velocity, not against it. Over the last decade, I have worked across offensive and defensive security. The core of my work has been building security systems that engineers actually use, by making software secure by default so teams can build and ship without friction. I started my security journey with CTF competitions as part of Team bi0s, India’s number one ranked team, where I competed internationally and later helped organize InCTF. That experience still shapes how I think. I like to go deep and understand how systems work. At CRED, I joined as the first security engineer and built the security function from the ground up. This included product security, DevSecOps, security engineering, and software supply chain security. Over time, I scaled the team, partnered closely with engineering, SRE, data, legal, and compliance, and embedded security into core business workflows rather than treating it as a blocker. I focused on building secure by default frameworks, enabling security champions across engineering, and making security practical through developer training and internal CTFs, while supporting regulatory and compliance efforts without slowing down product velocity. At Scapia, I am responsible for building the entire security charter from the ground up, across product security, infrastructure security, detection and response, enterprise security, and AI security, focused on embedding security into how the company builds and operates at scale. I have also open sourced frameworks in DevSecOps and software supply chain security, and have spoken and delivered training at conferences like Black Hat, OpenSSF, Nullcon and Seasides. Outside of work, you will find me in the mountains skiing, chasing fresh powder, and still perfecting my carving turns.

Location

Bengaluru

AI stack

antigravity

opencode

Work experience

Security at Scapia, Apr 2025 - Present · 1 yr 5 mos, Bengaluru, Building winning teams see my team's work 👉 https://engineering.scapia.cards/ & https://github.com/scapia-oss/

Engineering Leader - Product Security & Security Engineering at CRED, Apr 2023 - Apr 2025 · 2 yrs 1 mo, Bengaluru, Karnataka, India, ➤ Joined as the 1st engineer in CRED's security team and played a key role in establishing the security charter from the ground up. ➤ Lead and mentor a team of 10 Product Security and DevSecOps engineers, guiding them through the planning and execution of yearly roadmaps and OKRs. Oversaw progress tracking with KPI metrics and provided technical leadership to ensure successful outcomes. ➤ Established the DevSecOps charter from the ground up and developed internal frameworks to support 1000+ deployments per day. Ensured robust security measures, including SBOM, SCA, SAST, secret scanning, logging & monitoring, and SCM security, while adopting a shift-left approach to integrate security early in the SDLC. ➤ Secured a wide range of products and was involved in GTM of products across lending, insurance, wealth, BNPL, e-commerce, etc. Conducted thorough security reviews, including API reviews, manual source code reviews, threat modelling, and architecture reviews, to identify and address potential vulnerabilities. ➤ Established and managed a Security Champions program within 10+ engineering pods, promoting a consistent and strong security posture across engineering teams, and influenced these teams to adopt a security-first culture. ➤ Supported compliance and regulatory audits from a product security perspective, ensuring adherence to industry standards and regulatory requirements. ➤ Organized and conducted annual CTF competitions and security training sessions to foster a security-first culture and enhance security awareness across the organization.

Lead Security Engineer at CRED, Mar 2021 - Mar 2023 · 2 yrs 1 mo, Bangalore Urban, Karnataka, India

Senior Security Engineer at CRED, Mar 2020 - Mar 2021 · 1 yr 1 mo, Bangalore Urban, Karnataka, India

CTF player/Web Security at Team bi0s, Dec 2014 - Mar 2019 · 4 yrs 4 mos, Quilon, Kerala, India, https://ctftime.org/team/662

Education

Bachelor of Computer Applications (BCA), Computer Science, Amrita Vishwa Vidyapeetham

Grade 12, Business/Commerce, General, Indian Central School, Kuwait