Headline

Product Security Engineer at Splunk | Blackhat Arsenal | Nightingale | Open Source | Supply Chain Attack Simulator

About

Raja Nagori Product Security Engineer at Splunk (a Cisco Company) Lead - Nightingale Raja Nagori is a Product Security Engineer at Splunk, a Cisco company, where he works at the intersection of security engineering and innovation. He is an active contributor to the OWASP community and currently leads Nightingale, an open-source initiative focused on containerized penetration testing workflows. Under his leadership, Nightingale has been showcased and recognized at several international security conferences, including: • Black Hat Arsenal Asia (2022, 2023, 2024) • Black Hat Arsenal EU London (2025) • OWASP Global AppSec EU 2022 • Docker Community Hands-On Event • Black Hat Arsenal MEA (Shortlisted in 2022 & 2023) • IWCON 2023 • c0c0n 2024 Raja’s professional interests span across: • Web and Network Penetration Testing • Android & iOS Application Security • Threat Modeling and Secure Architecture Reviews • Source Code Review (SAST) and Authenticated DAST • DevOps Security: Docker and Container Hardening • DevSecOps: CI/CD Pipeline Security Automation • Scripting and Process Automation (Shell & Python) • Linux and Windows System Hardening Driven by curiosity, Raja is passionate about understanding how and why systems behave the way they do and how they can be made more resilient. He strongly believes that knowledge grows when shared, and has delivered talks and workshops across OWASP chapters and security communities worldwide. Outside of cybersecurity, Raja finds rhythm and balance through music often playing guitar to indie tunes and exploring new roads on his triumph speed 400.

Location

Hyderabad

AI stack

claude code

claude

codex

cursor

deepseek

hermes agent

Work experience

Product Security Engineer at Splunk, Oct 2023 - Present · 3 yrs 2 mos, Hyderabad, Acquired by Cisco ------------ - Conduct threat modeling and serve as a point of contact to identify insecure design patterns and threats in Splunk's products. - Remediate vulnerabilities found through SAST, DAST, and SCA assessments. - Develop and own high complexity security automation tools, and CI/CD integration, which handles the trends of the vulnerabilities coming on the products. - Detailed analytical information using Splunk Dashboard to classify the vulnerabilities. - Working on security design discussions, threat assessments, propose and discuss solutions to security tools, CICD pipeline changes, and pen testing that are directly related to their area of focus. - Architected an end-to-end threat-modeling copilot that carries FastAPI retrieval services with a chat surface, enabling security teams to ingest ERDs, query scraped AWS guidance, and receive actionable CIA/AAA recommendations in real time. - Agents Skills Reviews Entity-Relationship Diagrams (ERD) against threat-modeling readiness: reads the document text, inspects the diagram, and reports strengths, gaps, risks, and recommended improvements so developers know whether the ERD is ready for threat modeling.

Project Lead at OWASP® Foundation, Oct 2020 - Present · 6 yrs 2 mos, India

IT Security Analyst II at FIS, Nov 2021 - Oct 2023 · 2 yrs, Gurugram, Haryana, India, • Conducted authenticated Dynamic Application Security Testing (DAST) using Burpsuite for target systems. • Performed Source Code Review with commercial tools like Checkmarx and Veracode. • Engaged with CI/CD pipelines to ensure secure software development practices. • Conducted Threat Modelling exercises to enhance system security.

Information Security Analyst at FIS Global, Nov 2021 - Oct 2023 · 2 yrs, Researched emerging vulnerabilities, attack vectors, exploits, and security tools to proactively strengthen application and infrastructure defenses. Performed threat modeling and source code review using Checkmarx and Veracode across multiple business-critical financial applications, identifying and driving fixes for application security weaknesses. Provided mitigation guidance to development teams and executed DAST scans using BurpSuite to validate fixes and uncover runtime issues. Developed Bash automation to streamline VAPT workflows and reporting for assigned targets.

Synack RedTeam Member at Synack Red Team, Sep 2021 - Sep 2023 · 2 yrs 1 mo, Accessing & Securing the applications.

Education

Bachelor of Technology - BTech, Computer Engineering, Poornima Institute of Engineering & Technology

senior secondary, Computer Science, Adrash High School

Public links

github: https://github.com/RAJANAGORI

rajanagori.in: https://rajanagori.in/