Looking for a job

Sivakumar Balajee

@sivakumarbalajee

Application security engineer at CloudBees who conducts pentests and advances SLSA supply chain security.

At CloudBees, I perform internal penetration tests, integrate security testing tools, and conduct threat modeling to identify vulnerabilities.

I also work on resolving supply chain vulnerabilities to achieve SLSA levels, and led the engineering team in mitigating security vulnerabilities.

At Sidepash, I conducted third-party penetration testing for client applications, implemented SSDLC, and integrated security tools into client pipelines.

At Practical DevSecOps, I created the API Security Professional certification and developed security labs. Earlier, at Zoho Corporation, I reviewed feature code and integrated security tools into CI/CD pipelines.

Experience

Work history, roles, and key accomplishments

Current

Senior Software Security Engineer

Current

CloudBees

Mar 2024 - Present (2 years 6 months)

Performs internal pentesting to identify critical and high-level security vulnerabilities. Integrates and maintains security testing tools (SCA, SAST, DAST, Secret Scanning) and leads the engineering team to mitigate vulnerabilities.

Penetration Testing Threat Modeling SCA SAST DAST Secret Scanning Tools SLSA Provenance Supply Chain Security Security Automation

Senior Application Security Engineer

Sidepash

Dec 2022 - Mar 2024 (1 year 3 months)

Conducted third-party penetration testing for client applications. Implemented SSDLC and integrated security tools into client pipelines, and audited security reports to help engineering teams mitigate vulnerabilities.

Penetration Testing SSDLC Security Tool Integration Security Auditing Vulnerability Mitigation

Senior Security Engineer

Practical DevSecOps

Apr 2022 - Nov 2022 (7 months)

Created the API Security Professional certification. Integrated security tools for automating security testing (SCA, SAST, DAST, and CaC) and developed security labs to practice vulnerabilities.

API Security Security Automation SCA SAST DAST CAC Security Labs Certification Program Development

Application Security Engineer

Zoho Corporation

Feb 2019 - Jan 2022 (2 years 11 months)

Handled security vulnerabilities reported in bug bounty and coordinated with the team. Performed secure code review on all feature development and integrated security tools into the CI/CD pipeline.

Bug Bounty Secure Code Review CI CD Pipelines Security Tools Vulnerability Management