Franciny S Roj

Delivered AppSec and secure cloud migration services for large financial clients, performing malware reverse engineering, threat modeling, secure SDLC improvements, and incident response for high-assurance environments.

Participated in public and private bug bounty programs, discovering vulnerabilities in web and mobile targets and contributing to disclosures and Hall of Fame recognitions across platforms.

Owned corporate security posture for an online gaming platform, leading offensive and defensive programs, SOC operations, cloud security, and compliance (PCI-DSS, ISO, GDPR) while integrating blockchain-focused pentesting into CI/CD.

Performed cryptographic security testing and secure development for high-assurance systems, evaluating HSMs, conducting side-channel and fault-injection assessments, and validating compliance with FIPS and Common Criteria.

Led penetration testing and vulnerability management engagements, integrating SAST/DAST with manual testing and cryptographic assessments to improve secure SDLC and deliver high-impact security findings.

Established secure development practices and AppSec tooling, implemented SAST/DAST, manual code review and CI/CD test automation, and performed forensic analysis of account compromises.

Led design and implementation of a FIPS-compliant ingestion and data-integrity pipeline for Atlas, delivering signed audit evidence, HSM-backed key operations, and tamper-evident transfer workflows to support external audits.

Architected and implemented a privacy-preserving decentralized identity (SSI) system on Solana using ZK-SNARKs and optimized Rust programs, delivering selective disclosure, recursive proofs, and WC DID interoperability.

Led development of a QKD attack simulation, detection and defense platform integrating Qiskit/QuNetSim and ML/GNN models to detect attacks and optimize secure routing in multi-party quantum networks.

Completed a Bachelor degree in Data Science covering statistical analysis, machine learning, and data engineering concepts.

Completed a Bachelor degree in Public and Private Security Management with coursework focused on security policy, risk management, and organizational security practices.

Postgraduate MBA in Information Security and Data Privacy covering governance, compliance, and technical controls for protecting data assets.

Postgraduate degree in Criminology focused on criminal behavior analysis and investigative methodologies.

Postgraduate MBA in Information Management emphasizing information governance, IT strategy, and data lifecycle management.

Postgraduate degree in Forensic Science and Criminal Forensic Expertise covering forensic methodologies, evidence analysis, and legal procedures.