Siddharth Baviskar

DevOps Engineer

Bengaluru, Karnataka, India11 yrs experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in Web3.0 and Cloud Security.
Proven track record in compliance with ISO 27001 and PCI DSS.
Strong experience in DevSecOps and penetration testing.

Stackforce AI infers this person is a Cybersecurity Specialist with expertise in Cloud and Blockchain Security.

Contact

Skills

Core Skills

Blockchain SecurityWeb3Cloud SecurityApplication SecurityDevsecops

Other Skills

AWS SecurityAndroid PentestingApplication Security ArchitectureArchitectureArchitecture ReviewsCEHCisco Routing & SwitchingCloud Access Security Broker (CASB)Computer SecurityContainer securityDLP configurationData ProtectionEthical HackerEthical HackingFootball

About

Security Engineer having ~8 years of experience in designing / implementing security throughout the SDLC. Web3.0 Security: => Wallet Security: Designing and implementing policies for secure funds movement to / from exchanges and custody wallet solutions. => Incident Response: Designing and implementing response strategies for blockchain-related security breaches, ensuring rapid containment and recovery. => Risk Assessment & Monitoring: Leveraging advanced tools to detect, analyze, and mitigate risks in real-time across blockchain networks. => Security Architecture: Building end-to-end security frameworks for decentralized platforms, from wallet security to consensus mechanism integrity. Cloud Security: => Helping team in designing security baseline: IAM | Logging and Monitoring | Data Protection | Infrastructure Security | I & R => Performing regular security assessments on AWS services DevSecOps: => Helping team design secure product by performing Architecture Reviews, Threat Modelling. => Designing CI/CD pipeline to automate secrets scanning/SAST/SCA/DAST solutions. => Automating static analysis for Infrastructure as Code. => Automating compliance scans via CM tools. => Container / Micro-services Security. => Secrets Management via HashiCorp Vault. VA / Penetration Testing: => Application (Web Apps / APIs) Penetration Testing => Network Penetration Testing => Mobile Application Penetration Testing (Android and iOS applications). => Working on SIEM Solution configuration and set-up => Working on DLP configuration and set-up => Helping company in getting ISO 27001, PCI DSS Compliance

Experience

Peepalco

2 roles

Lead Security Engineer

Oct 2024 – Present · 1 yr 5 mos · Remote

All things Security (Web2.0 and Web3.0)

Blockchain SecurityWeb3AWS Security

Senior Security Engineer

Oct 2021 – Sep 2024 · 2 yrs 11 mos · Remote

All things Security
=> Leading Product Security @ CoinSwitch
=> Cloud Security
=> DevSecOps
=> Perimeter Security
=> Application Security (Web / API & Mobile Applications)
=> VA/ PT
=> Ensuing securing compliance (from SEBI) for security asset classes like Indian Equities / Mutual Fund.

ISO 27001Container securityCloud SecurityAWS SecurityCloud Access Security Broker (CASB)Blockchain Security+4

Jumio corporation

Security Engineer

Mar 2020 – Sep 2021 · 1 yr 6 mos · Bangalore Urban, Karnataka, India

Helped establish security culture in the company
Cloud Security:
=> Helping team in designing security baseline: IAM | Logging and Monitoring | Data Protection | Infrastructure Security | I & R
=> Performing regular security assessments on AWS services
DevSecOps:
=> Helping team design secure product by performing Architecture Reviews, Threat Modelling.
=> Designing CI/CD pipeline to automate secrets scanning/SAST/SCA/DAST solutions.
=> Automating static analysis for Infrastructure as Code.
=> Automating compliance scans via CM tools.
=> Container / Micro-services Security.
=> Secrets Management via HashiCorp Vault.
VA / Penetration Testing:
=> Application (Web Apps / APIs) Penetration Testing
=> Network Penetration Testing
=> Mobile Application Penetration Testing (Android and iOS applications).
=> Working on SIEM Solution configuration and set-up
=> Working on DLP configuration and set-up
=> Helping company in getting ISO 27001, PCI DSS Compliance

IAMLogging and MonitoringData ProtectionInfrastructure SecurityArchitecture ReviewsThreat Modelling+5

Career break

Bereavement

Dec 2019 – Feb 2020 · 2 mos

Taking care of responsibilities at home after the death of a family member.

Swiggy

Security Engineer II

Apr 2019 – Dec 2019 · 8 mos · Greater Bengaluru Area

Roles and Responsibilities:
Currently, leading the pentesting efforts
Defining API / Mobile / AWS Secure Configuration/Development Guidelines
Hardening infrastructure (AWS), Containers and Assets
Web Application and Web Services (APIs) Penetration Testing
Network Security Testing
Mobile (Android/iOS) Application Penetration Testing
Performing Architecture Review and Threat Modelling on Swiggy’s infrastructure
Handling Swiggy’s Bug Bounty Program

Synopsys inc

2 roles

Security Consultant

Promoted

Mar 2016 – Mar 2019 · 3 yrs

Currently, leading a team of 7+ talented members. Key responsibilities includes:
Manage delivery for various offerings – VAPT, Mobile PT, Source Code review, Network PT
Project Management
Performance reviews & management
People Management
Conducting:
Web Application Penetration Testing
Web Services Penetration Testing
Network Penetration Testing
Android Application Penetration Testing
iOS Application Penetration Testing
Security Architecture Survey, Architecture Review Analysis
Secure Design Review - MS SecArch, Architecture Review, Threat Modelling
Managing and leading multiple clients/project.