Safeeq B

Security Engineer

Bengaluru, Karnataka, India5 yrs 9 mos experience

Highly Stable

Key Highlights

Expert in dual roles of Security Engineer and Architect.
Proven track record in vulnerability assessment and remediation.
Strong automation skills enhancing security visibility.

Stackforce AI infers this person is a Cybersecurity expert specializing in application and infrastructure security.

Contact

Skills

Core Skills

Security Architecture DesignPenetration TestingApplication Security

Other Skills

Red TeamingSASTVulnerability ScanningNetwork SecurityInformation Security ManagementThreat & Vulnerability ManagementBurp SuiteThreat ModelingWeb Application SecurityIncident ResponseEthical HackingWeb App and API ProtectionVulnerability AssessmentPython (Programming Language)Automation

About

Security professional operating across dual roles as a Security Engineer and Security Architect, with hands-on experience in application, network, cloud, and infrastructure security. I lead internal penetration testing across web, API, thick client, cloud, and network environments, along with infrastructure security assessments. My work includes triaging vulnerabilities from client reports, bug bounty programs, and threat intelligence, validating third-party assessments, and driving remediation to closure. From an architecture perspective, I focus on threat modeling, secure design and code reviews, and evaluating applications, solutions, and AI systems for security, privacy, and compliance risks. I also support SOC escalations, third-party risk management (TPRM), and GRC initiatives. Additionally, I build automation to track live hosts, assets, and infrastructure findings, improving visibility and remediation efficiency. Focused on delivering practical, scalable security solutions that align with business and risk objectives..

Experience

5 yrs 9 mos

Total Experience

4 yrs 9 mos

Average Tenure

1 yr

Current Experience

Kroll

Senior Security Engineer (L3)– InfoSec

Jun 2025 – Present · 1 yr · Bengaluru · Hybrid

Operate in dual roles as Security Engineer and Security Architect across application, network, cloud, and infrastructure domains
Conduct internal penetration testing (web, API, thick client, cloud, network, infrastructure)
Perform infrastructure and network security assessments and triage related findings
Review and validate third-party security assessment reports
Triage vulnerabilities from clients, bug bounty programs, and other intake channels
Drive remediation efforts and track closure across stakeholders
Build automation to track live hosts, assets, and infrastructure security findings
Perform threat modeling, secure design reviews, and code reviews
Support threat intelligence analysis and SOC escalations
Assess third-party/vendor risk (TPRM) and overall security posture
Contribute to GRC initiatives and ensure compliance with security and privacy requirements
Evaluate applications, solutions, and AI systems for security risks and controls

Red TeamingSASTVulnerability ScanningNetwork SecurityInformation Security ManagementSecurity Architecture Design+11

Synopsys inc

3 roles

Security Services Staff Consultant

Promoted

Apr 2022 – Jun 2025 · 3 yrs 2 mos

As a skilled information security professional, I have extensive experience in conducting grey-box and black-box testing of mobile and Web applications. My testing has uncovered high-level vulnerabilities in both external and internal-facing sites, allowing me to implement effective remediation strategies that have significantly reduced risk to my clients. In addition to my testing capabilities, I have also documented detailed operational procedures to guide clients through the implementation of robust information security protocols. My comprehensive understanding of infrastructure-level vulnerabilities and ability to communicate complex security issues to non-technical stakeholders have been instrumental in achieving a high level of client satisfaction.

Application SecurityiOS