Shubham Raj Email & Phone Number

Remote First, Us

DRI (Directly Responsible Individual) for Wallets (all kinds of internal / external wallets) security, ensuring the safety for hundreds of billions of dollars in digital assets.

Bangalore, In

San Francisco , Ca, Us

Bangalore, In

Portland, Or, Us

Ahmedabad, Gujarat, In

Polygon/Matic, Curie Money, undisclosed companies in security, 0x, Percent, etc.

London, Uk, Gb

Bangalore, Karnataka, In

First cheque.

San Francisco, California, Us

Mumbai, In

Mumbai, Maharashtra, In

Seattle, Wa, Us

AppSec affinity engineer for AWS External Security Services (GuardDuty, Inspector, Detective, Macie, SecurityHub, etc.), AWS Automated Reasoning Group, Console (systems & services which power AWS Console), AWS Config, AWS Kinesis, etc.- Successfully led the proposal to CISO/CEO and developed a sample for a new building mechanism, ensuring products and changes are secure by default, streamlining security review processes, and expediting the release of new services.- 360-degree security review for key AWS products, safeguarding both external and internal services.- Engaged in continuous cross-organizational collaboration with partner teams & leadership, focusing on raising security bar and fostering a security-conscious culture and processes across teams.- Designed and implemented automated processes for tracking changes, ensuring no updates shipped without proper AppSec review, thus maintaining a high level of security.- Worked on establishing a zero trust model for DNS and Certificate management against insider and accidental threats.- Led and owned security research initiatives, including embargoed security issues and impact analysis, as well as projects focused on tools development, automation, and the enhancement of security processes and practices across AWS.

Seattle, Wa, Us

- Promoted

Austin, Tx, Us

- Conducted comprehensive security testing of web applications or networks in open or closed environments over VPN, generating detailed vulnerability reports and collaborating on bug patching.- As a part of the Synack Red Team, improved information security for some of the leading Fortune 500 companies by identifying vulnerabilities and advising on effective remediation strategies.

San Francisco, California, Us

- Conducted 100+ penetration tests under Cobalt Labs, earning recognition as one of the top global security researchers on their platform.- Performed penetration testing and code reviews for a diverse range of clients in industries such as IT, healthcare, cryptocurrency, finance, and SaaS, IaaS, PaaS companies, covering web applications, services, APIs, and networks.- Developed working proof of concepts and documented research outcomes for effective vulnerability communication; created custom scripts to automate testing and exploitation efforts, streamlining the overall security assessment process.- Collaborated with client security teams and CTOs throughout the security assessment process, providing guidance on vulnerability reproduction, mitigation, and the implementation of best security practices.- Past position: Researcher (Bug Hunter)

OpenFire Technologies, a corporate security service that emerged from the success of the OpenFire Security Project. OpenFire Security was a dedicated digital security research platform, bringing together individuals from various countries to collaborate, share insights, resources, and experiences in internet, web application, network, and software security.The community thrived as we delved into exploit research, exploit development, in-depth web application penetration testing, code auditing, and discussions on computer science, network topology, and protocols. The immense support and growth of our community led to the birth of OpenFire Technologies.OpenFire Security was one of the largest & most active security forum at the time of it's peak.

Palo Alto, California, Us

- Supervised and conducted vulnerability assessments and penetration testing (VAPT) for web applications, both independently and as part of a team, assisting clients with vulnerability mitigation and enhancing information security.- Recommended network and web security standards to management and team members, tailoring suggestions to specific requirements. Developed security assessment methodologies and processes to streamline and improve the overall assessment approach.

Master'S Degree, Computer Science (Information Security), Entrepreneurship

Bachelor Of Computer Application, Software Engineering, Network Security & Cryptography, Etc.