# Shivangi Rai

Shivangi Rai is a remote worker on Himalayas, Senior Development Engineer III, Product Security at Wayfair, based in India.

Source: https://himalayas.app/@shivangirai2

```text
Application security engineer at Wayfair who helped expand GitHub Advanced Security to 8,000 repositories and built AI-assisted dependency reachability analysis.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | India |
| Authorized to work in | India |
| Salary expectations | 140k+ INR |
| Job categories | Application Security Engineer, Product Security Engineer, Security Consultant, Security Analyst |
| Skills | Application Security, Product Security, Secure SDLC, CI CD Security, Supply Chain Security, SAST, SCA, DAST, Threat Modeling, Security Design Reviews, Code Review, API Security, GraphQL Security, Authorization, Tenant Isolation |
| LinkedIn | https://linkedin.com/in/shivangi-s-95066296 |

## About

```text
At Wayfair, I helped expand GitHub Advanced Security scanning to 8,000 repositories and designed a proof of concept that connects ArmorCode findings to required GitHub checks. I also built Python-based reachability analysis for critical CVEs, using AI-assisted code context to assess whether vulnerable functions could be reached.

At Wayfair, I review architecture, code, and threat models for platform services, APIs, GraphQL subgraphs, and webhooks, and work with engineers on remediation. Before that, I led product security assessments and design reviews at MOENGAGE, and performed penetration testing and secure code reviews at Aujas Networks, TECH MAHINDRA, and HAPPIEST MINDS.
```

## Experience

### Senior Development Engineer III, Product Security (current)

[Wayfair](https://himalayas.app/companies/wayfair-inc). Jan 2025 - Present

```text
Designed a proof of concept for CI/CD security gates using ArmorCode findings and expanded GitHub Advanced Security scanning to 8,000 repositories. Triaged SCA findings and built Python-based reachability analysis for critical CVEs using AI-assisted code context.
```

Skills: SAST, SCA, DAST, CI-CD, Github-Advanced-Security, CodeQl, Dependabot, ArmorCode, Reachability-Analysis, Python, AI-Security, Threat-Modeling, API-Security, GraphQL, Kubernetes, Istio, Kong, JWT, OIDC, Burp-suite, HackerOne

### Product Security Lead

[MoEngage](https://himalayas.app/companies/moengage). Jul 2021 - Dec 2024

```text
Led application, API, and SDK security assessments and design reviews, and introduced SCA practices for dependency vulnerabilities and license issues. Delivered secure-development training to engineering teams.
```

Skills: Application-Security, API-Security, SDK-Security, Design-Reviews, SCA, Secure-Development-Training

### Security Consultant

Aujas Networks. Dec 2019 - Jul 2021

```text
Performed web, mobile, network, and Active Directory penetration tests, and created an OWASP Top 10/WASC assessment framework. Documented attack paths and remediation plans.
```

Skills: Penetration-Testing, Web-Security, Mobile-Security, Network-Security, Active-Directory, OWASP, WASC

### Security Analyst

[Tech Mahindra](https://himalayas.app/companies/tech-mahindra). Jul 2019 - Dec 2019

```text
Performed SAST, DAST, and secure code reviews for Singapore government websites, and validated bug-bounty reports. Coordinated fixes with developers.
```

Skills: SAST, DAST, Secure-Code-Review, Bug-Bounty

### Senior Engineer, IMSS

Happiest Minds. Oct 2016 - Jun 2019

```text
Assessed web, mobile, thick-client, and API environments, including 50+ web applications, and conducted cloud reviews against CIS benchmarks. Validated remediation.
```

Skills: Web-Security, Mobile-Security, API-Security, Cloud-Security, CIS-Benchmarks

## Education

### KIIT University

B.Tech, Electronics & Telecommunication. Grade: 8.41/10

```text
Completed a B.Tech in Electronics & Telecommunication from KIIT University with a CGPA of 8.41/10.
```

## Tech stack

- Kubernetes
- Dependabot
- Python
- Istio
- Checkmarx
- Burp Suite
- CodeQL

To contact Shivangi, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Payal Bisht](https://himalayas.app/@payalbisht): Security Analyst, Accenture Solutions Pvt. Ltd.
- [Suhas Kulkarni](https://himalayas.app/@suhaskulkarni): Application Security Architect, Blue Yonder
- [Adarsh Kumar](https://himalayas.app/@adarshkumar12): Product Security Engineer, Splunk
- [arun kumar](https://himalayas.app/@arunkumar29): Staff Product Security Engineer, Revenera
- [Santhoshini Ganta](https://himalayas.app/@santhoshiniganta): Associate Information Security Engineer, Gainsight
- [Mohit jain](https://himalayas.app/@mohitsat007): Principal Security Architect, Empower
- [Sanatkumar User](https://himalayas.app/@sanatkumaruser): Technical Consultant, Global Payments
- [sai kumar](https://himalayas.app/@saikumar9): Application Security Engineer, DAZN Software Private Limited
- [Sivakumar Balajee](https://himalayas.app/@sivakumarbalajee): Senior Software Security Engineer, CloudBees
- [Kaustubh User](https://himalayas.app/@kaustubhuser2): Member of Technical Staff – Professional 2, Omnissa