Siddharth Ojha — CTO

I am a security leader with deep hands-on expertise in building and scaling security programs that balance strong defenses with business velocity. Over the years, I have driven application, cloud, and infrastructure security transformations, led high-impact incident response, and built in-house trust & safety detection systems and anti-cheat systems with integrated in-house device intelligence system. My career spans offensive security (red teaming, penetration testing, reversing, exploit research), defensive engineering (SIEM, SOAR, IAM, DLP, DevSecOps, DSPM,EDR/XDR), and strategic security leadership (ISO 27001, DPDP, ITGC, CCPA, PCI-DSS compliance). I bring a bottom-up understanding of security from debugging assembly in reversing labs to shaping executive-level security roadmaps. Highlights include: - Fraud & Anti-Cheat: Designed and deployed device fingerprinting, VPN/GPS spoofing detection, bot-farm disruption, chargeback abuse monitoring, and solver detection engines for poker. - Cloud & Infra Security: Drove AWS↔GCP migrations, rolled out Prisma Cloud, Zscaler ZIA/ZPA, and Cortex XDR; automated GuardDuty, WAF, IAM, and key management for real-time detection and response. - Application Security: Instituted secure SDLC, DevSecOps pipelines (Jenkins, GitLab, Bitbucket), code review automation, and mobile app hardening with AppSealing/AppGuard. - Threat Detection & SOC Buildout: Built an in-house Security Operations Center covering SIEM, SOAR, DR/BCP playbooks, red/blue/purple team exercises, and continuous fraud monitoring. - Leadership: Head of Security Engineering at MPL, managing 20+ engineers, fraud specialists, and IT staff across continents, embedding security into product, infra, and operations. Recognized as an OSCP-certified professional and active bug bounty hunter with acknowledgments from LinkedIn, Upwork, Canva, Lime, PizzaHut, Blend, Takeaway, Magento, and others. Technical toolbox spans across Burp Suite, ZAP, Frida, MobSF, Nessus, Metasploit, OpenVAS, Nmap, radare2, dnSpy, Vault, Kubernetes, Docker, Python, Bash, Golang. Skilled at architecting scalable detection and prevention pipelines and teaching teams how to think adversarially. TL;DR: I specialise in making security pragmatic, scalable, and forward-looking engineering solutions that outpace adversaries while enabling business growth.

Stackforce AI infers this person is a Cybersecurity expert specializing in scalable security solutions for B2C and B2B environments.

Location: Bengaluru, Karnataka, India

Experience: 8 yrs 9 mos