Karan Bhatt

Security Engineer

Bengaluru, Karnataka, India3 yrs 7 mos experience

Highly Stable

Key Highlights

Expert in securing applications during development lifecycle.
Led initiatives to enhance security posture at Groww.
Managed public Bug Bounty program effectively.

Stackforce AI infers this person is a Cyber Security Specialist with a focus on Fintech application security.

Contact

Skills

Core Skills

Application SecurityCloud SecurityVulnerability ManagementPenetration Testing

Other Skills

API SecurityApplication Security AssessmentsCybersecurityManagementMobile SecurityNetwork SecurityProject ManagementPublic SpeakingSecuritySecurity AssessmentSecurity TrainingStrategic PlanningThreat ModelingVulnerability AssessmentWeb Application Security Assessment

About

Holds an M.Tech in Cyber Security from Rashtriya Raksha University and a Bachelor of Engineering in Information Technology. Currently serving as a Product Security Engineer II at Groww, contributing to robust application security during the Secure Software Development Life Cycle. Specializes in cloud security, API security, penetration testing, and threat modeling to ensure resilient systems. At Groww, collaborates with teams to identify and mitigate high-impact vulnerabilities, enhancing security for critical applications like Stocks, MF, F&O and US-stocks. Takes pride in fostering a culture of security, driving R&D initiatives, and managing Groww's public Bug Bounty program. Motivated to build secure digital ecosystems while bringing technical expertise and a proactive approach to organizational security challenges.

Experience

Ajaib

Engineer- Security [Consultant]

Jul 2025 – Present · 8 mos · India · Remote

Groww

3 roles

Product Security Engineer II

Jul 2024 – Jul 2025 · 1 yr

Cloud SecurityAPI SecurityPenetration TestingThreat ModelingApplication Security

Product Security Engineer

Promoted

Aug 2022 – Aug 2024 · 2 yrs

> Responsible for securing the Application during the Secure Software Development Life Cycle.
> Skilled in performing PRD reviews, Threat Modelling, Architecture Review, Infrastructure Review , Cloud Security and Penetration Testing for forthcoming features/products within the organisation.
> Undertaken the security testing for Stocks and Us-stocks applications and features.
> Managed and implemented new policies for Groww’s public Bug Bounty program and handled it as a primary SPOC for 6 months.
> Driving different R&D program across entity to enhance the security posture of Groww.
> Discovered various High and Critical vulnerabilities on Groww’s external and internal endpoints and services reducing monetary loss.
> Performed Firewall rule review between the entity to do smooth operation in secure way.
> Responsible for giving security sign-off of various Internal/External facing API and feature integration.
> Performed security testing of various third party service and application integration.
> Discovered various bugs during SAST and DAST for Groww’s iOS and Android App.
> Performed the review of the Organisation policies, bucket level access and object level access rules in GCP as part of identifying Cloud Misconfigurations.
> Performed the review and implemented the bucket rules and review the user of Firebase with aim to secure it.
> Handling the Vulnerability Management program of the entity where we get Web, Mobile, Cloud Security Issues fixed in collaboration with respective stake-holding teams.
> Conducting regular developer training workshops on mobile and web security best practices.
> Responsible for having a regular cadence with the senior management to give them insight about the security posture of their products.

Cloud SecurityPenetration TestingThreat ModelingVulnerability ManagementSecurity TrainingApplication Security

Cyber Security Analyst

Feb 2022 – Aug 2022 · 6 mos

> Responsible for conducting White-Box Pentesting of Groww’s Website.
> Responsible for conducting security assessment of third party tools.
> Responsible giving security sign-off of various integration (Mostly newly integrated APIs).
> Responsible for taking regular followups on various security tickets

White-Box Penetration TestingSecurity AssessmentAPI SecurityPenetration Testing