Saksham G.

Director of Engineering

Delhi, India11 yrs experience

Most Likely To Switch

Key Highlights

Expert in cloud and application security.
Led security initiatives for major platforms.
Proven track record in threat modeling and vulnerability management.

Stackforce AI infers this person is a Cybersecurity expert with a focus on cloud security and application protection.

Contact

Skills

Core Skills

Cloud SecurityInfrastructure SecurityProduct Security

Other Skills

Assembly LanguageCSRFCommunicationComputer GraphicsContent Delivery Network SecurityContent Distribution NetworksContent SecurityCryptographyDRMHindiJavaK8 securityMatlabPenetration TestingProblem Solving

Experience

Jiostar

2 roles

Director - Security

Promoted

Apr 2025 – Present · 11 mos

Senior Manager - Security

Dec 2023 – Apr 2025 · 1 yr 4 mos

Cloud SecurityInfrastructure SecurityProduct SecurityWeb Application SecuritySecurity Assertion Markup Language (SAML)Secure SDLC+10

Sharechat

Staff Security Engineer

Oct 2021 – Dec 2023 · 2 yrs 2 mos · India

Led cloud and application security
Responsible for securing cloud infrastructure (GCP) and maintain compliance with CIS standards
Streamlined organization level policies, defined GCP IAM policies along with just in time access
Deployed an in-house stack which then integrated with various security tooling for centralized visualization and notifications
Setup WAF firewall rules and rate limits for entire platform traffic.
Deployed in-house CSPM tool to reduce cost.
Automated the CI/CD pipeline with SAST/SCA/DAST tools like Synk and GAS
Implemented zero trust architecture solution for internal tools and resources.
Redefined the DNS setup and segregation of controls based on use case
Reviewed and Implemented security controls across for GWS, N/W firewalls, LDAP etc.
Streamlined cloud infra firewall. Integrated with automations for continuous monitoring and alerting.
Defined the internal BugBounty program and SOP for engineering
Performed threat modeling / design review during the PRD/ERD and for vendor integrations
Collaborated with the GRC team as technical SPOC for ISO 27001/ISMS policy/ITGC reviews

Cloud SecurityInfrastructure SecurityProduct SecuritySecurity Assertion Markup Language (SAML)Problem SolvingSingle Sign-On (SSO)+2

Sony interactive entertainment

Application Security Engineer (Sony Playstation)

Jul 2019 – Aug 2021 · 2 yrs 1 mo · San Francisco, California · On-site

Web/mobile authentication and authorization flow for PS5.
Defined the segregated use of identity tokens, opaque tokens, JWT tokens and scope/scope groups , used auth code, client credentials and SSO grant type for web and mobile.
Attestation feature for improving app integrity and reducing spam.
Worked on designing solutions to reduce chat spam via mobile app messaging.
Designed security measures to improve the SSO/QR code login flow on mobile app
Designed solutions to secure GraphQL queries/mutations.
Managed the playstation bug bounty program for off console apps.
Additional responsibilities included threat modeling and occasional pen-testing of mobile/web applications and services.

Product SecurityProblem SolvingSingle Sign-On (SSO)Redis