# Sivakumar Balajee

Sivakumar Balajee is a remote worker on Himalayas, Senior Software Security Engineer at CloudBees, based in India.

Source: https://himalayas.app/@sivakumarbalajee

```text
Application security engineer at CloudBees who conducts pentests and advances SLSA supply chain security.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | India |
| Authorized to work in | India |
| Salary expectations | 314k+ INR |
| Job categories | Application Security Engineer, Software Security Engineer, Security Engineer |
| Skills | Application Security, Penetration Testing, Threat Modeling, Secure Code Review, DevSecOps, Supply Chain Security, API Security, Security Automation, SSDLC, SLSA Provenance, SAST, DAST, SCA, Secret Scanning Tools, CI CD |

## About

```text
At CloudBees, I perform internal penetration tests, integrate security testing tools, and conduct threat modeling to identify vulnerabilities.

I also work on resolving supply chain vulnerabilities to achieve SLSA levels, and led the engineering team in mitigating security vulnerabilities.

At Sidepash, I conducted third-party penetration testing for client applications, implemented SSDLC, and integrated security tools into client pipelines.

At Practical DevSecOps, I created the API Security Professional certification and developed security labs. Earlier, at Zoho Corporation, I reviewed feature code and integrated security tools into CI/CD pipelines.
```

## Experience

### Senior Software Security Engineer (current)

[CloudBees](https://himalayas.app/companies/cloudbees). Mar 2024 - Present

```text
Performs internal pentesting to identify critical and high-level security vulnerabilities. Integrates and maintains security testing tools (SCA, SAST, DAST, Secret Scanning) and leads the engineering team to mitigate vulnerabilities.
```

Skills: Penetration-Testing, Threat-Modeling, SCA, SAST, DAST, Secret-Scanning-Tools, SLSA-Provenance, Supply-Chain-Security, Security-Automation

### Senior Application Security Engineer

Sidepash. Dec 2022 - Mar 2024

```text
Conducted third-party penetration testing for client applications. Implemented SSDLC and integrated security tools into client pipelines, and audited security reports to help engineering teams mitigate vulnerabilities.
```

Skills: Penetration-Testing, SSDLC, Security-Tool-Integration, Security-Auditing, Vulnerability-Mitigation

### Senior Security Engineer

Practical DevSecOps. Apr 2022 - Nov 2022

```text
Created the API Security Professional certification. Integrated security tools for automating security testing (SCA, SAST, DAST, and CaC) and developed security labs to practice vulnerabilities.
```

Skills: API-Security, Security-Automation, SCA, SAST, DAST, CAC, Security-Labs, Certification-Program-Development

### Application Security Engineer

Zoho Corporation. Feb 2019 - Jan 2022

```text
Handled security vulnerabilities reported in bug bounty and coordinated with the team. Performed secure code review on all feature development and integrated security tools into the CI/CD pipeline.
```

Skills: Bug-Bounty, Secure-Code-Review, CI-CD-Pipelines, Security-Tools, Vulnerability-Management

## Education

### Zoho Schools

Advanced Study, Cybersecurity and Software Engineering

```text
Advanced study in cybersecurity and software engineering at Zoho Schools, completed in 2018.
```

## Tech stack

- GitHub
- GitLab
- Kubernetes
- React
- JavaScript
- Python
- Java
- C++
- Linux
- ZAP
- Docker
- Zap
- Snyk
- Burp Suite
- Anchore
- Bash
- DefectDojo

To contact Sivakumar, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Payal Bisht](https://himalayas.app/@payalbisht): Security Analyst, Accenture Solutions Pvt. Ltd.
- [Ramiz Khan](https://himalayas.app/@ramizkhan1): Application Architect Associate Manager, Accenture
- [Suhas Kulkarni](https://himalayas.app/@suhaskulkarni): Application Security Architect, Blue Yonder
- [Rituraj Vishwakarma](https://himalayas.app/@riturajvishwakarma): Lead Application Security, Axis Securities
- [Mayuri Joshi](https://himalayas.app/@mayurijoshi2): Senior Application Security Engineer, CitiusTech
- [Akash Pandey](https://himalayas.app/@akashpandey3): Security Delivery Specialist, Accenture Solutions Pvt Ltd.
- [DILLIBABU VIJAYAKUMAR](https://himalayas.app/@dillibabuvijayakumar): Independent Security Researcher, Self Employed
- [Sanatkumar User](https://himalayas.app/@sanatkumaruser): Technical Consultant, Global Payments
- [Usha Sree](https://himalayas.app/@ushasree2): Security Delivery Team Lead, Accenture Technologies
- [Sudarshan Pawar](https://himalayas.app/@sudarshanpawar): Manager, App Sec, OpenGov