Feb 2026 – Present · 3 mos

Sep 2024 – Feb 2026 · 1 yr 5 mos

• Building Meesho's Compliance & Risk Management Platform - Complisys
• Designed and developed Complisys, a comprehensive internal tool to streamline compliance operations, enforce policy governance, and manage security workflows across the organization.
• Built a multi-level approval system to handle policy lifecycle management—ensuring full accountability, traceability, and audit readiness.
• Developed a centralized Risk Register to identify, assess, and track enterprise risks, along with risk treatment planning, evidence submission, and real-time mitigation tracking for all stakeholders.
• Automated vendor onboarding workflows within Complisys, embedding risk evaluation, due diligence checks, and Annual Third-Party Risk Management (TPRM) assessments—saving Meesho over $20,000.
• Security-First Vendor Governance
• Contributed to creation of processes to enforce compliance as mandatory checkpoint during vendor onboarding. This initiative also streamlined the onboarding flow and Annual TPRM assessment process, embedding security deeply into vendor lifecycle management.
• Shift-Left Security Champion at Meesho
• Spearheaded multiple shift-left security initiatives, including pre-commit secret detection and development of a centralized dashboard to visualize security events across all engineering teams.
• Built and deployed an org-wide automation script to scale secret scanning across all repositories, reducing false positives to under 1%—delivering measurable cost savings of over $120,000.
• Proactive Vulnerability Mitigation
• Led the initiative to eliminate all SQL Injection (SQLi) vulnerabilities from Meesho’s codebase. Personally reviewed and analyzed code across services to identify and patch critical issues ahead of Meesho’s Bug Bounty program launch.
• End-to-End Security Involvement
• Actively involved in architecture and design reviews, threat modeling, and penetration testing across all Meesho assets—covering web, Android, iOS, and internal platforms.

Mar 2024 – Sep 2024 · 6 mos

• Designed and developed the Bug Bounty website, enabling users to submit bugs and allowing admins to review and manage them efficiently.
• Integrated the system with Jira for automatic ticket creation and set up notifications via Gmail and Slack to keep stakeholders informed throughout the bug resolution process.