Programming for Everybody (Getting Started with Python)

Practical Introduction to the Command Line

Cyber Security

Kubernetes for the Absolute Beginners - Hands-on Tutorial

Docker Training Course for the Absolute Beginner

Unix Badge

Ethical Hacking

Certified Ethical Hacker (Practical)

C Programming Tutorial for Absolute Beginners with Examples

Introduction to Internet of Things

Fundamentals of Python

NSE 1 Network Security Associate

Fundamentals of Computer Hacking

Network Fundamentals

Secure Code Warrior - Security Skilled

Cyber Security & Forensics Graduate

Chaicode.com

BASIC

Student

Volunteer in organising the Cyber Security Conference and created CTF challenges based on OSINT,
Steganography, and Python.

Team Member

Bachelor of Technology (BTech)

<ul><li>Architecting Security Solution &amp; Deployment</li><li>SSDLC Automation &amp; Integration</li><li>Collaborative Innovation &amp; Pioneering Exploration (PoC)</li><li>Automated Cloud Vulnerability Management &amp; Visualization</li><li>Governance, Controls &amp; Documentation</li><li>Shadow IT Asset Management</li><li>Managed Bug Bounty Program</li><li>Security Awareness Sessions</li></ul>

Product Security Engineer

• Cyber Threat Research &amp; Automation Code: Researched on the latest cybersecurity threats and devised automation code for Vulnerability Scanners and External Attack Surface Management (EASM) platform.

• Vulnerability Scanner Enhancement: Enhanced Automated Vulnerability Scanner effectiveness by analyzing and incorporating insights from Pentester-discovered vulnerabilities, ensuring continuous improvement.

• Security Automation &amp; Testing: Developed modular and efficient security automation plugins with comprehensive documentation and robust test cases using Pytest to ensure optimal functionality, scalability, and reliability of the Scanner.

Security Automation Engineer

• Architecting DevSecOps Pipelines: Architected and implemented comprehensive DevSecOps security scanning pipelines across 2,000+ production repositories, integrating SAST, SCA, Secret Scanning, Container Scanning and Dockerfile Scanning, resulting in 40% reduction in security vulnerabilities.

• DevSecOps Pipelines Migration: Led the migration of 2,000+ production repositories to GitLab’s Pipeline Execution Policy, ensuring seamless transition with zero production disruption.

• Pipeline Optimization &amp; Developer Collaboration: Optimized pipeline execution time by 35% through workflow and configuration enhancements, while refining pipeline templates based on systematic troubleshooting and developer feedback to improve overall efficiency and developer experience.

Security Engineer

• Architected Container Security Framework &amp; Security Policies: Spearheaded unified container-scanning framework and governance model, standardizing vulnerability checks for Docker images across all development teams while designing and enforcing JFrog Xray policies (severity gates, CVE exemptions, whitelists) to achieve 100% compliance and accelerate remediation cycles.

• Orchestrated CI/CD-Native Security Enforcement: Integrated JFrog Xray container security scans into Harness CI/CD pipelines at both build and deploy stages, automating checks that block non-compliant images and improving vulnerability detection by 50%.

• Led Container Scanning Tool Evaluation: Directed comparative analysis of industry tools (JFrog Xray, Trivy, Grype) against criteria including detection accuracy, performance impact, cost, and API support—piloting top choice to boost scan throughput without affecting pipeline SLAs.

Senior Cybersecurity Engineer

Product Security Engineer (R&D) @PayPal | DevSecOps & Container Security | Shift Left | SSDLC | Cloud Security | Python

medium

github

Know about Shivam Saraswat's work experience, education, bootcamps, certifications, and much more. Shivam Saraswat