Open to opportunities

Shilajit Das

@shilajitdas

Message

Cybersecurity engineer focused on red team operations, application security, and regulatory compliance.

India

Message

What I'm looking for

I seek roles where I can lead offensive security efforts, improve app and cloud security, drive compliance, mentor teams, and work closely with CISOs in a collaborative, security-first culture.

I am a cybersecurity engineer with hands-on experience in red team operations, application security testing (SAST/DAST), cloud security, and compliance audits (NIST, ISO, SOC, PCI-DSS). I have led red team activities, performed VAPT across cloud and infrastructure, managed attack surface monitoring using OSINT, and supported GRC teams for compliance certifications.

I have worked across product and service organizations, collaborating with CISOs and law enforcement on live cases, establishing SIEM and security governance, and delivering security awareness training. My background includes roles at Hexaware, Freshworks, Atomicwork, and C2Treds, multiple certifications (CEH, CCSP, Azure, Qualys), and achievements in national cyber competitions.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

C2Treds

Apr 2025 - Present (8 months)

Established security and governance policies and SIEM, performed application security testing, attack surface monitoring, TPRM, and VAPT for cloud and infrastructure to enhance fintech security posture.

SIEM Governance Application Security SAST DAST SCA Red Team Operations VAPT Report Tracker Risk Assessment Third Party Risk Management Security Auditing Security Awareness

Security Engineer

Agentic

Nov 2024 - Apr 2025 (5 months)

Performed product security testing using SAST/DAST, cloud VA testing, phishing simulations, and collected compliance evidence while working closely with the CISO to achieve certifications.

Security Testing SAST DAST Compliance IAM Cloud Security Infrastructure Security Security Awareness Security Auditing Security And Compliance Frameworks

Security Engineer

Freshworks

Sep 2024 - Nov 2024 (2 months)

Performed application security testing (SAST/DAST), triaged bug-bounty findings, and supported GRC for compliance and audits while coordinating with product teams to remediate vulnerabilities.

Security Testing SAST DAST Bug Bounty GRC Cloud Security

Security Engineer

Hexaware Technologies

Mar 2022 - Aug 2024 (2 years 5 months)

Led Red Team activities and managed attack surface and dark web monitoring using OSINT TTPs; performed VAPT, configuration audits, and web/API appsec testing to improve security posture across products.

Red Team Operations SAST DAST OSINT Cloud Security Configuration Audits

Cyber Security Intern

Gurugram Police Cyber Cell

Jun 2021 - Jul 2021 (1 month)

Worked on live cyber fraud and forensic cases, assisted in threat modeling, DAST, SIEM, and prepared investigative reports while coordinating with law enforcement and mentors.

Threat Modeling DAST OSINT SIEM Forensics Teamwork

Education

Degrees, certifications, and relevant coursework

Chandigarh University

Bachelor of Engineering, Computer Science (Information Security)

2018 - 2022

Bachelor of Engineering in Computer Science (Information Security) completed with coursework focused on information security topics from July 2018 to June 2022.