Senior Product Security Engineer — securing large-scale consumer platforms across gaming, fintech, and telecom.
🌐 ev1lm0rty.com · 📧 shubham_arya@outlook.com · 💼 LinkedIn
- Threat Modeling & Architecture Reviews - STRIDE-based assessments for backend microservices, public APIs, and new product features
- Adversarial Security Assessments — uncovering P0s including account takeover chains, pipeline compromises, and data exposures
- Application Security - DAST, SAST, SCA, Android security, WAF management across high-scale production environments
- Security Automation - building tools that scale security coverage without scaling headcount
- Bug Bounty — co-managing Bugcrowd program end-to-end at Dream11
| Project | Stack | Description |
|---|---|---|
| HTB-Recon | Python, Bash | Automated recon script for HackTheBox machines |
| LazyScripts | Python, Bash | Focused scripts for pentesting and bug bounty workflows |
| Dump-Programs | Python | Automated extraction of VDP and bug bounty scopes from Bugcrowd, HackerOne |
Security: Threat Modeling (STRIDE), DAST (Burp Suite, OWASP ZAP), SAST (Checkmarx, Fortify, BlackDuck), SCA, API Security, Android Security (Frida, jadx), WAF (AWS WAF), MITRE ATT&CK, OWASP
Cloud & Infra: AWS, GCP, Orca Security, CSPM, CI/CD Security, ELK Stack
Languages: Python, Bash, Java, Go, JavaScript
- Podium finisher at national-level CTF competitions including DeathBell and ByteCyberLabs
- 5+ years securing large-scale consumer platforms across fintech, telecom, and gaming