Looking for a job

Shantanu Shastri

@shantanushastri

Message

Cyber Security Engineer at GE Healthcare who developed a DAST-based AI Red Teaming platform for medical devices.

United Kingdom

Message

What I'm looking for

I’m open to relocation anywhere in the UK and have full right to work, with no employer sponsorship required.

At GE Healthcare, I developed and deployed a DAST-based AI Red Teaming platform for testing prompt injection, model evasion, and data poisoning across AI-powered medical devices. I also contributed to an IP filing and two trade secrets in medical device cybersecurity and AI security testing.

As Security Design Authority, I led product security architecture for IoT-enabled medical devices and helped integrate Secure SDLC and DevSecOps practices across engineering teams. I’ve also founded BSides Eastbourne and published open-source security tools, GhostGateway and DicomGhost.

Experience

Work history, roles, and key accomplishments

Current

Founder & Lead Organiser

Current

BSides Eastbourne

Apr 2026 - Present (6 months)

Founded BSides Eastbourne, the first community-led cybersecurity conference on the East Sussex coast, securing official recognition from BSides Global. Lead all aspects of event delivery including programme management, CFP curation, speaker engagement, sponsorship strategy, and stakeholder communications.

Event Management Program Management Sponsorship Strategy Stakeholder Engagement Community Building Web Development Social Media Management

Current

Staff Cyber Security Engineer

Current

GE Healthcare

Jun 2019 - Present (7 years 4 months)

Developed a proprietary DAST-based AI Red Teaming platform for automated adversarial testing across GE Healthcare's AI-powered medical device portfolio. Led product security architecture for 70+ IoT-enabled medical devices, acting as Security Design Authority and embedding Secure SDLC/DevSecOps across engineering teams.

AI Red Teaming DAST Security Architecture STRIDE Threat Modelling Secure SDLC DevSecOps IoT Security Cloud Security Vulnerability Management FDA Cybersecurity Guidance EU MDR IEC 81001 5 1 UL 2900 OWASP Top 10 for LLMs CI CD Security Post Market Surveillance

Associate Consultant, Penetration Testing and Security Advisory

ProVise

Mar 2018 - May 2019 (1 year 2 months)

Delivered 15+ enterprise VAPT engagements for web applications and VoIP infrastructure, conducting cyber risk assessments and implementing mitigation strategies. Executed red teaming exercises and Whitebox/Greybox/Blackbox penetration testing using Burp Suite, Nessus, and Metasploit.

Penetration Testing VAPT Red Teaming Burp suite Nessus Metasploit Web Application Security Voice Security Risk Assessment Access Control Data Protection

Information Security Manager

Avasure Technologies Pvt Ltd

Mar 2017 - Feb 2018 (11 months)

Led network and application security assessments, executing on-site VAPT of web applications using Qualys and Burp Suite to uncover configuration flaws and attack vectors. Supported cybersecurity initiatives for government and Reliance Industries critical infrastructure projects.

Network Security Application Security VAPT Qualys Burp suite Risk Assessment Critical Infrastructure Protection Cybersecurity

Cyber Security Intern

Cyber Crime Cell, Gurgaon Police

Apr 2016 - May 2016 (1 month)

Conducted OSINT investigations and digital footprint analysis to identify threats, assisting law enforcement in monitoring cybersecurity incidents and gathering digital evidence. Developed a cybercrime reporting website to improve citizen reporting mechanisms.

OSINT Digital Forensics Cybercrime Investigation Web Development Cyber Security Awareness