Siddharth Rajput

Security Engineer

New Delhi, Delhi, India4 yrs 9 mos experience

Most Likely To Switch

Key Highlights

Recognized bug hunter with multiple Hall of Fame entries.
Expert in automating security processes using Python.
Proven track record in vulnerability assessment and penetration testing.

Stackforce AI infers this person is a Cybersecurity and DevOps specialist with a focus on automation and security testing.

Contact

Skills

Core Skills

CybersecurityDevopsInformation Security

Other Skills

Amazon Web Services (AWS)AnsibleApplication SecurityApplication TestingBashBig DataBurpsuiteC++CryptographyData AnalysisDockerMobile SecurityMySQLNmapPenetration Testing

About

Security Engineer & BackEnd Developer - Given my experience with Python, I do a lot of automation stuff in CTF competitions or in general. - Acknowledged and rewarded by many companies for finding vulnerabilities. - Bug Hunter/Security researcher with multiple Hall of fames. - Also worked in other domains like Big Data, Data Analysis, Devops.

Experience

Servicenow

Staff Security Engineer - DevSecOps

Jul 2023 – Present · 2 yrs 8 mos · Hyderabad, Telangana, India

Meesho

DevSecOps Engineer

Nov 2021 – Jul 2023 · 1 yr 8 mos · Bengaluru, Karnataka, India · Hybrid

I have experience in designing and implementing an in-house SAST pipeline for code and secrets scanning, implementing alerting functionality to block code release, and conducting feature security reviews and penetration testing of web, mobile, and iOS apps. I have also set up recon automation resulting in a 50% increase in asset tracking efficiency and utilized Ansible and Bash scripts to automate CVE scanning for services used in EC2 instances. Additionally, I have expertise in AWS security, including creating alarms and notifications for EC2 instances using CloudWatch.

Python (Programming Language)Information SecurityBurpsuiteDockerBashPenetration Testing+6

Curl

DevSecOps Engineer

May 2021 – Oct 2021 · 5 mos · Bhopal, Madhya Pradesh, India · Remote

Have configuring intranets for IoT devices, implementing Hashicorp Vault for Docker authorization, resolving Docker and Kubernetes issues, and creating scripts to automate key processes such as deployments, upgrades, on-boarding, and validations.

Python (Programming Language)DevOpsInformation SecurityBurpsuiteBashRedis+2

Jai kisan

Penetration Tester

Jan 2021 – Mar 2021 · 2 mos · Bhopal, Madhya Pradesh, India

Helping team design secure product by performing Architecture Reviews, Threat Modelling.
Identify and define security requirements adhering to S-SDLC approach
In-depth security review of feature releases in internal and external Web/Mobile apps.
Help developers in resolving security issues identified in security reviews.

Information SecurityBurpsuiteSecurity TestingThreat ModellingVulnerability AssessmentApplication Security+2

Mortgage kart limited

Devops Intern

Jul 2020 – Sep 2020 · 2 mos · Bhopal, Madhya Pradesh, India

Performing Vulnerability assessment of Web applications using OWASP Methodologies.
Preparing comprehensive security report detailing identifications and recommendations for the Vulnerabilities.
Recommending proper Remediation & Implementation of the Bug fix.

Haryana

Gurugram Police Cyber security Summer Intern

Jun 2020 – Jul 2020 · 1 mo · India

Conducted investigations into cybercrime cases in compliance with relevant Indian cyber laws, utilizing advanced tools, and subsequently delivered a project on online fraud research along with the development of a social media crawler tool under the guidance of Mr. Rakshit Tandon, Cyber Security Expert and Consultant at the Internet and Mobile Association of India.

Upsave analytics

Security Analyst

May 2020 – Jul 2020 · 2 mos · Delhi, India

In-depth security review of feature releases in internal and external Web/Mobile apps.
Help developers in resolving security issues identified in security reviews.
Help and train developers to inculcate secure coding practices.