Headline

Security Engineer at BreachLock, Inc. | Certified Ethical Hacker

About

I build the security that other engineers build on top of. As an Research Engineer at the Centre for Development of Telematics (C-DOT), I design and harden production systems from penetration testing web applications and APIs to engineering the automated tooling that finds vulnerabilities before attackers do. I've identified ~30 vulnerabilities across production systems (25+ remediated at medium/high severity), built in-house proof-of-concepts and secure architecture designs for new networking projects, and automated 70% of previously manual security workflows using Python. My focus areas: API security testing, secure code review (SAST/SCA), network security architecture, vulnerability management, and security automation. I work daily in Burp Suite, Sonatype, and Python to turn manual security processes into repeatable, scalable systems not just find issues, but build the guardrails that prevent them. Previously, at Poshmark, I integrated AWS Macie into the CI/CD pipeline for early PII exposure detection, implemented CSP and SafeFrame for secure ad delivery, and automated vulnerability assessments cutting manual testing time by 80%. B.Tech in Computer Science, IIITDM Jabalpur. Google Cybersecurity Professional Certificate. Open to Application Security / Product Security Engineer roles where I can keep building systems that scale securely by desig

Location

Greater Bengaluru Area

AI stack

claude code

gemini

github copilot

ChatGPT

Work experience

Security Engineer at BreachLock, Inc., Sep 2026 - Present · 2 mos, Pune District, Maharashtra, India

Research Engineer at Centre for Development of Telematics (C-DOT), Aug 2023 - Sep 2026 · 3 yrs 2 mos, Bengaluru, Karnataka, India, Automated system health alarm tools using Python, achieving a 100% reduction in manual report generation time. Performed penetration testing on production web applications and APIs, identifying critical vulnerabilities misconfigurations. Implemented firewall rules and optimized system configurations to strengthen network security. Conducted deep source code and dependency analysis with SAST and SCA tools, recommending updates that resolved 10+ critical CVEs. Configured and managed servers and ACLs for secure resource access. Specialized in API endpoint security testing to protect against emerging threats. Key Tools & Technologies: Burp Suite, Sonatype, Python, Google Cloud, Git

Security engineer intern at Poshmark, Jan 2023 - Jul 2023 · 7 mos, India, Automating security tools using Python to streamline vulnerability assessments, resulting in a 80% reduction in manual testing time. Conducting penetration testing on production web applications and APIs, uncovering critical vulnerabilities. Implementing Content Security Policy (CSP) and SafeFrame for secure ad delivery, significantly reducing the risk of client-side attacks and malicious injections. Analyzing source code and third-party libraries for security flaws using SAST and SCA tools; recommended updates to resolve 10+ critical CVEs. Collaborating with engineering teams to remediate findings and improve overall application security posture. Key Tools & Technologies: Burp Suite, Checkmarx, Sonatype, Python, AWS, CSP, SafeFrame, Git

Education

Bachelor of Technology - BTech, Computer Science, Indian Institute of Information Technology, Design and Manufacturing, Jabalpur

Bachelor of Technology, Computer Engineering, IIITDM Jabalpur