---
title: "DILLIBABU V. - Subject Matter Expert in Chennai | Tal"
description: "Meet DILLIBABU V., Lead Security Engineer | Shipping Secure Code at Startup Speed | DevSecOps | AWS | Compliance Strategist – SOC 2 · ISO 27001 · CASA | AppSec | Cloud Security | K8s | HTB & Pwned Labs | OSCP In Progress based in Chennai. AI stack includes codex and claudecode."
image: "https://tal.club/meet/dillibabu-v/share-image"
---

# DILLIBABU V\. on Tal

## Headline

Lead Security Engineer \| Shipping Secure Code at Startup Speed \| DevSecOps \| AWS \| Compliance Strategist – SOC 2 · ISO 27001 · CASA \| AppSec \| Cloud Security \| K8s \| HTB & Pwned Labs \| OSCP In Progress

## About

I don't just find vulnerabilities — I architect security programs that make them structurally difficult to exist\. With 7\+ years of professional experience in cybersecurity, I've built and scaled Application Security, Cloud Security, and DevSecOps functions from the ground up at high\-growth SaaS companies\. I operate at the intersection of engineering and strategy: designing automation\-first security frameworks that protect products without slowing down delivery\. At SuperOps Technologies, I own the security engineering function end\-to\-end: DevSecOps & Pipeline Security — Embedded SAST, SCA, and IaC scanning across all CI/CD pipelines\. Consolidated three legacy tools into a unified platform \(Aikido, end\-to\-end procurement\), cutting tool sprawl by 60%\. Performed pipeline security audits org\-wide\. Cloud Security & Cost Impact — Full AWS posture assessments using Pacu, ScoutSuite, Prowler, GuardDuty, Trusted Advisor, and Inspector\. Reduced S3 costs by 63%\. Catalogued AWS Guardrails and SCP policies\. Leading CloudFront\-for\-SaaS WAF migration with gap analysis and edge monitoring\. Product & Application Security — Discovered critical agent vulnerability, driving cross\-platform hardening\. Designed anti\-ransomware controls reducing platform abuse\. Built API security testing frameworks and conducted org\-wide VAPT\. Compliance Strategy — Procured CASA certification end\-to\-end for Google OAuth\. Drove SOC 2 Type II and ISO 27001 audits\. Built a self\-service Trust Center eliminating manual compliance requests\. Security Automation & Observability — Deployed SIEM for centralized monitoring\. Built AWS patch runbooks\. Ran phishing simulations\. Leveraging AI \(Claude\) daily to accelerate triage, documentation, and research — compressing a multi\-person workload into a streamlined operation\. Outside of work, I stay sharp through OSCP preparation, Hack The Box \(Subject Matter Expert since 2025\), Pwned Labs \(Ghost Rank — 28\+ cloud security labs across AWS, Azure, GCP\), and active bug bounty research on HackerOne and Bugcrowd — with findings reported to Pinterest, Dell, Glassdoor, and USAA\. Security is a business enabler, not a bottleneck\. I build it that way\.

## Location

Chennai

## AI stack

codex

claudecode

## Work experience

Subject Matter Expert at Hack The Box, Feb 2025 \- Present · 1 yr 7 mos, Chennai, Subject Matter Expert \(since Feb 2025\) and active practitioner on Hack The Box since 2019, solving challenges and labs to deepen real\-world offensive security skills\. \- Solve a wide range of challenges covering web exploitation, privilege escalation, Active Directory attacks, cryptography, and reverse engineering\. \- Sharpening offensive security skills in preparation for OSCP certification, building an attacker mindset to identify and exploit vulnerabilities across diverse systems\. \- Appointed as Subject Matter Expert in 2025, contributing content and expertise to the platform’s challenge ecosystem\.

Lead Security Engineer \(Promoted from Senior Security Engineer\) at SuperOps, Dec 2023 \- Present · 2 yrs 9 mos, Chennai, Built SuperOps' security engineering function from the ground up for a SaaS platform serving customers globally\. Full ownership across DevSecOps, cloud security, application security, and compliance — enabling enterprise deals and secure scaling\. Security Program & DevSecOps \- Stood up the entire security practice — embedded SAST, SCA, IaC scanning across all CI/CD pipelines, performed pipeline security audits, and consolidated three tools into one platform \(Aikido, end\-to\-end procurement\), cutting overhead by 60%\. Cloud Security & Cost Impact \- Full AWS posture assessments using Pacu, ScoutSuite, Prowler, GuardDuty, Trusted Advisor, Inspector\. Reduced S3 costs by 63% monthly\. Catalogued AWS Guardrails and SCP policies\. Migrated IAM inline to managed policies\. Optimized Kinesis and Data Firehose for log ingestion\. CloudFront\-for\-SaaS — WAF config, Nginx rule migration, gap analysis, edge monitoring\. Deployed SIEM; built patch runbooks via AWS Systems Manager\. Product Security & Incident Response \- Discovered critical agent vulnerability drove cross\-platform hardening across Windows, macOS, Ubuntu\. Designed anti\-ransomware controls reducing platform abuse\. Validated agent binaries for regulated customer assessments\. Kubernetes audits via Kube\-audit; resolved K8s production issues\. Compliance & Governance \- Procured CASA certification end\-to\-end for Google OAuth\. SOC 2 Type II and ISO 27001 audit contributions\. Built customer\-facing Trust Center\. Managed Bug Bounty\. Ran phishing simulations\. Created supply chain vetting process\. Leadership \- Built a Security Lab for hiring — full\-stack app with OAuth, flag\-based submissions, hardened admin portal\. Security culture across 100\+ engineers — threat modeling, phishing simulations, red\-team exercises\. Using AI \(Claude\) daily for triage, documentation, and research\. Observability engineering — log parsers, alerts, noise reduction, AWS cost optimization\.

Security Researcher at Bugcrowd, Feb 2020 \- Present · 6 yrs 7 mos, Remote, Active participant in Bugcrowd’s Bug Bounty Programs, identifying and reporting high\-priority vulnerabilities across web and mobile applications for major enterprises\. \- Discovered and reported critical vulnerabilities including SQL Injection, XSS, SSRF, CSRF, session management issues, OAuth misconfigurations, and parameter tampering\. \- Provided comprehensive vulnerability reports with proof\-of\-concept exploits and actionable remediation guidance, helping organizations strengthen their security posture\. \- Targets have included programs for companies like Pinterest, Dell, Glassdoor, and USAA\.

Security Researcher at HackerOne, Feb 2020 \- Present · 6 yrs 7 mos, Contributed to HackerOne Bug Bounty Programs, discovering vulnerabilities in production environments and providing comprehensive reports to improve system security\. \- Specialized in uncovering complex security issues including SQL Injection, XSS, session management weaknesses, input validation flaws, header manipulation, information leakage, and OAuth misconfigurations\. \- Delivered actionable recommendations for mitigation and risk reduction, with a focus on root\-cause analysis rather than symptom\-level fixes\.

Software Development Engineer in Test I\- Cyber Security at Halodoc, Jun 2022 \- Dec 2023 · 1 yr 7 mos, Bengaluru, Built and executed end\-to\-end security testing strategies across web, mobile, API, container, and cloud platforms for a leading healthtech platform serving millions of users\. Web & API Security \- Conducted Web Application Security Testing focused on OWASP Top 10 and SANS 25, identifying logic flaws, misconfigurations, and critical vulnerabilities across multiple product lines\. Tested and validated API security using Postman and manual techniques, ensuring proper authentication, authorization, and data protection across 50\+ endpoints\. Mobile Security \- Performed Android security assessments using Apktool, Jadx, Frida, Objection, Drozer, MobSF, and Burp Suite – covering reverse engineering, runtime analysis, and API interception\. Executed iOS security testing aligned with OWASP Mobile Top 10 using Frida, Objection, Passionfruit, Radare2, and MobSF for both static and dynamic analysis\. Cloud & Container Security \- Conducted AWS Cloud Configuration Reviews based on CIS Benchmarks, identifying misconfigurations and implementing hardening measures across production accounts\. Secured containerized workloads by performing Docker Security Testing using Trivy, identifying vulnerabilities in base images and application dependencies\. Led AWS Cloud Security Audits using GuardDuty and CloudWatch, proactively identifying threats and suspicious activities\. Security Operations \- Performed Software Composition Analysis \(SCA\) using OWASP Dependency\-Check, reducing open\-source risk exposure in CI/CD pipelines\. Collaborated with Microsoft security architects to interpret threat models and perform penetration testing against defined threat control measures\. Developed security plans and mitigation strategies for both high\-impact and low\-risk events, supporting organizational resilience\.

## Education

Master of Technology \(M\.Tech\.\), Ethical Hacking, Hindustan University

Bachelor of Technology, Information Technology, S\.K\.P Engineering College

[View the original profile](https://tal.club/meet/dillibabu-v)

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Person",
      "@id": "https://tal.club/meet/dillibabu-v#person",
      "name": "DILLIBABU V.",
      "url": "https://tal.club/meet/dillibabu-v",
      "description": "Meet DILLIBABU V., Lead Security Engineer | Shipping Secure Code at Startup Speed | DevSecOps | AWS | Compliance Strategist – SOC 2 · ISO 27001 · CASA | AppSec | Cloud Security | K8s | HTB & Pwned Labs | OSCP In Progress based in Chennai. AI stack includes codex and claudecode.",
      "jobTitle": "Subject Matter Expert",
      "worksFor": {
        "@type": "Organization",
        "name": "Hack The Box"
      },
      "hasOccupation": {
        "@type": "Occupation",
        "name": "Subject Matter Expert"
      },
      "homeLocation": {
        "@type": "Place",
        "name": "Chennai"
      },
      "alumniOf": [
        {
          "@type": "EducationalOrganization",
          "name": "Hindustan University"
        },
        {
          "@type": "EducationalOrganization",
          "name": "S.K.P Engineering College"
        }
      ],
      "knowsAbout": [
        "codex",
        "claudecode"
      ],
      "mainEntityOfPage": {
        "@id": "https://tal.club/meet/dillibabu-v#webpage"
      }
    },
    {
      "@type": "ProfilePage",
      "@id": "https://tal.club/meet/dillibabu-v#webpage",
      "url": "https://tal.club/meet/dillibabu-v",
      "name": "DILLIBABU V. on Tal",
      "description": "Meet DILLIBABU V., Lead Security Engineer | Shipping Secure Code at Startup Speed | DevSecOps | AWS | Compliance Strategist – SOC 2 · ISO 27001 · CASA | AppSec | Cloud Security | K8s | HTB & Pwned Labs | OSCP In Progress based in Chennai. AI stack includes codex and claudecode.",
      "dateModified": "2026-08-02T04:41:09.098Z",
      "isPartOf": {
        "@id": "https://tal.club/#website"
      },
      "mainEntity": {
        "@id": "https://tal.club/meet/dillibabu-v#person"
      },
      "inLanguage": "en-IN"
    }
  ]
}
```