Secure Code Warrior - Security Skilled

Cyber Security & Forensics Graduate

Docker Training Course for the Absolute Beginner

NSE 1 Network Security Associate

C Programming Tutorial for Absolute Beginners with Examples

Unix Badge

Practical Introduction to the Command Line

Programming for Everybody (Getting Started with Python)

Certified Ethical Hacker (Practical)

Kubernetes for the Absolute Beginners - Hands-on Tutorial

Network Fundamentals

Ethical Hacking

Introduction to Internet of Things

Cyber Security

Fundamentals of Python

Fundamentals of Computer Hacking

Volunteer in organising the Cyber Security Conference and created CTF challenges based on OSINT,
Steganography, and Python.

Team Member

Bachelor of Technology - BTech

• Architecting Security Solution & Deployment: Engineered Heimdall, an in-house Automated Web and API Security Monitoring Solution, reducing external engagement costs by 20% through improved responsible disclosure programs. Orchestrated cloud deployment using GitHub Actions, Cloud Run, and Artifact Registry, ensuring seamless functionality.

• SSDLC Automation & Integration: Key architect for developing an organization-wide proactive automated SSDLC maturity model. This includes one-click enablement via platform engineering, instant on-demand security assessment, security maturity score, actionable insights and automated secure template integration for developers.

• Collaborative Innovation: Worked with Engineering teams to pioneer R&D efforts to strengthen IKEA’s product security infrastructure, integrating advanced tools into CI/CD pipelines.

• Pioneering Exploration (PoC):  Led cross-functional teams in prototyping and implementing cloud-first security architecture, resulting in 3

Product Security Engineer

• Cyber Threat Research & Automation Code: Spearheaded research on the latest cybersecurity threats and devised automation code for Vulnerability Scanners and External Attack Surface Management (EASM) platform.

• Vulnerability Scanner Enhancement: Enhanced the effectiveness of the Automated Vulnerability Scanner by meticulously analyzing and incorporating insights from Pentester-discovered vulnerabilities, ensuring continuous improvement.

• Modular Security Automation Code: Developed modular and efficient code for security automation plugins, optimizing functionality and scalability while ensuring comprehensive documentation.

• Scrum-based Collaboration: Engaged in a scrum-based environment, leveraging tools like Jira, Bitbucket, and Confluence to foster efficient collaboration and streamline project management processes.

• Test Case Development: Created comprehensive test cases using Pytest, ensuring robust and reliable performance of the Scanner.

• Microservice API Development: 

Security Automation Engineer

• Architecting DevSecOps Pipelines: Architected and implemented comprehensive DevSecOps security scanning pipelines across 2,000+ production repositories, integrating SAST, SCA, Secret Scanning, Container Scanning and Dockerfile Scanning, resulting in 40% reduction in security vulnerabilities.

• DevSecOps Pipelines Migration: Led large-scale migration to GitLab’s Pipeline Execution Policy from legacy compliance pipelines for 2000+ production repositories, modernizing security scanning processes while ensuring zero production disruption.

• Pipeline Optimization: Reduced pipeline execution time by 35% through optimization of security scanning workflows and configuration improvements.

• Developer Feedback: Enhanced DevSecOps pipeline templates through systematic troubleshooting and developer feedback, streamlining security scanning workflows and improving developer experience with optimized configurations.

Security Engineer

Automating Security @Tekion | Product Security Engineer | DevSecOps | SSDLC | Shift Left | Cloud Security | Python

github

Know about Shivam Saraswat’s work experience, education, bootcamps, certifications, and much more. Shivam Saraswat