Looking for a job

Shivanshu Singh

@shivanshusingh1

Message

Security Engineer at Spotdraft building DevSecOps pipelines and AI-powered security tools.

India

Message

At Spotdraft, I lead the Security and Compliance charter and built internal and open-source tools to automate security. I also built the open-source tool Toleman Platform from scratch.

I built and enforced a DevSecOps pipeline with open-source tools, moving CI to blocking new vulnerabilities in one month. I also set up cloud security posture management, intrusion detection, a web application firewall, and SIEM alerting.

At Viacom18 - JioCinema (Now JioHotstar), I conducted threat modeling and code reviews of backend services written in Golang and Kotlin. I implemented DevSecOps coverage across the code base and contributed to incident operations and the platform merger.

Earlier, I performed web, Android, API, server, and network security testing at Net Square Solutions Pvt. Ltd. I built scripts to automate testing and reporting, and conducted technical sessions on Smart Contract Security.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Engineer

Current

Spotdraft (Draftspotting Technologies Pvt Ltd)

Dec 2025 - Present (10 months)

Leading Security and Compliance charter, built DevSecOps pipeline, and implemented security tools and processes.

DevSecOps CSPM IDS WAF SIEM AI Security Threat Modeling Open Source Vulnerability Management Supply Chain Security Compliance SOC 1 SOC2 ISO 27001 FedRAMP

Senior Cybersecurity Engineer

Viacom18 - JioCinema (Now JioHotstar)

Apr 2023 - Dec 2025 (2 years 8 months)

Conducted code reviews, threat modeling, and implemented CSPM and DevSecOps for comprehensive security coverage.

Code Review Threat Modeling CSPM DevSecOps SAST DAST Incident Management Go Kotlin

Security Engineer

Amica Financial Technologies Private Limited (Jupiter.money)

Jan 2022 - Mar 2023 (1 year 2 months)

Redesigned auth model, implemented SSL pinning, and performed security testing and code audits.

Authentication Modeling SSL Pinning DAST Threat Modeling Coding Auditing React Native Vendor Management

Security Analyst

Net Square Solutions Pvt. Ltd.

Jan 2020 - Jan 2022 (2 years)

Performed vulnerability assessment and penetration testing for web, Android, and API, and prepared detailed reports.

Vulnerability Assessment Penetration Testing Web Application Testing Android Testing API Testing Report Writing CTF Scripting

Education

Degrees, certifications, and relevant coursework

IIIT Bangalore

PG Diploma, Software Development

2021 - 2022

Activities and societies: Projects: A Decentralised KYC Verification Process for Banks (Ethereum), Property Registration System (Hyperledger Fabric), Drug Counterfeiting Problem (Hyperledger Fabric)

Pursued a PG Diploma in Software Development with a focus on Blockchain Development, including projects on decentralized KYC, property registration, and drug counterfeiting.