Sourov Ghosh

DevOps Engineer

Hyderabad, Telangana, India8 yrs 9 mos experience

Key Highlights

Expert in penetration testing and application security.
Certified in multiple security domains including Kubernetes and ethical hacking.
Proven experience managing security programs and automation.

Stackforce AI infers this person is a Security Engineer specializing in application and cloud security within the tech industry.

Contact

sghosh2402@gmail.com LinkedIn

Skills

Core Skills

Penetration TestingSecurity AutomationApplication SecurityWeb Application SecurityNetwork Security

Other Skills

API Security AssessmentArchitecture reviewArduinoBug Bounty ManagementC++Cloud-native securityCode reviewEthical HackingGo (Programming Language)IOTJavaJavaScriptKubernetesLinuxMobile Application Security Testing

About

Security Engineer with experience in application security, architecture review, code review, cloud-native security. Certifications - Certified Kubernetes Security Specialist (CKS) - Certified Kubernetes Administrator (CKA) - Offensive Security Certified Professional (OSCP) - Certified Red Team Expert (CRTE) - Certified Ethical Hacker (CEH)

Experience

Microsoft

Senior Security Engineer

Jul 2025 – Present · 8 mos · Hyderabad, Telangana, India · On-site

Snowflake

Senior Security Engineer

Oct 2022 – Jul 2025 · 2 yrs 9 mos · Pune, Maharashtra, India · Hybrid

Pentesting of corporate and product applications
Managing Snowflake BugBounty Program
Security Automation and Tooling

Penetration TestingSecurity AutomationBug Bounty Management

Vmware

Product Security Engineer

Apr 2021 – Oct 2022 · 1 yr 6 mos · Bengaluru, Karnataka, India · Remote

Threat Modelling
Penetration Testing
Security Automation

Threat ModellingPenetration TestingSecurity Automation

Payatu

Security Consultant

Apr 2020 – Mar 2021 · 11 mos · Pune, Maharashtra

Perform penetration testing on applications/products to identify security vulnerabilities
Participate in red team exercise on web applications and network
Work with cross-functional teams to align and prioritize remediation efforts
Develop secure code practices and provide hands-on training to development teams
Develop scripts, tools, or methodologies to enhance offensive security capabilities

Penetration TestingRed TeamingSecure Code PracticesApplication Security

Pwc india

3 roles

Associate

Promoted

Apr 2019 – Mar 2020 · 11 mos · Kolkata, West Bengal, India

Web Application, Network & Mobile Application Security Testing.
Conducted a comprehensive security review for banking applications which included web application security assessment, network vulnerability assessment, secure configuration review and API security assessment.
Found critical vulnerabilities (such as PII Disclosure, remote code execution, DLL Hijacking,
privilege escalation, cross-site scripting, local file inclusion etc.) on different client environments.
Performed IoT Security Assessment of Smart devices.
Hands-on experience in different types of security tools like Nessus Pro, Nmap, HP WebInspect Enterprise Edition, HPE Fortify, Burp Suite Pro, Sqlmap, Acunetix, Metasploit, Frida, and Postman.

Web Application Security TestingNetwork Security TestingMobile Application Security TestingAPI Security AssessmentWeb Application SecurityNetwork Security