Karan Bhatt Email & Phone Number

Bengaluru, Ka, In

Bangalore

> Responsible for securing the Application during the Secure Software Development Life Cycle.> Skilled in performing PRD reviews, Threat Modelling, Architecture Review, Infrastructure Review , Cloud Security and Penetration Testing for forthcoming features/products within the organisation.> Undertaken the security testing for Stocks and Us-stocks applications and features.> Managed and implemented new policies for Groww’s public Bug Bounty program and handled it as a primary SPOC for 6 months.> Driving different R&D program across entity to enhance the security posture of Groww.> Discovered various High and Critical vulnerabilities on Groww’s external and internal endpoints and services reducing monetary loss.> Performed Firewall rule review between the entity to do smooth operation in secure way.> Responsible for giving security sign-off of various Internal/External facing API and feature integration.> Performed security testing of various third party service and application integration.> Discovered various bugs during SAST and DAST for Groww’s iOS and Android App.> Performed the review of the Organisation policies, bucket level access and object level access rules in GCP as part of identifying Cloud Misconfigurations.> Performed the review and implemented the bucket rules and review the user of Firebase with aim to secure it.> Handling the Vulnerability Management program of the entity where we get Web, Mobile, Cloud Security Issues fixed in collaboration with respective stake-holding teams.> Conducting regular developer training workshops on mobile and web security best practices.> Responsible for having a regular cadence with the senior management to give them insight about the security posture of their products.

Bangalore

> Responsible for conducting White-Box Pentesting of Groww’s Website.> Responsible for conducting security assessment of third party tools.> Responsible giving security sign-off of various integration (Mostly newly integrated APIs).> Responsible for taking regular followups on various security tickets

Ahmedabad, Gujarat, India

> Responsible for conducting Pentesting of Clients Website.> Responsible for handling the client website and network security of Clients.

M.Tech, Cyber Security

Be - Bachelor Of Engineering, Information Technology