Looking for a job

Winja Code

@winjacode

Security Engineer at Amazon securing Amazon Pay with threat modeling and design reviews that identify payment-system risks before launch.

India

Message

At Amazon, I secure the Amazon Pay payments platform through design security reviews, threat modeling, and architecture risk assessments. I work with SDE teams to translate threat models into actionable controls and identify high-risk vulnerabilities before launch.

Previously, at Synopsys Inc. I tested more than 100 web and mobile applications and contributed to Red Team initiatives. At Aujas Cybersecurity (NSE-IT), I conducted security assessments across web, mobile, thick-client, and network environments; I also co-founded Career Village at the c0c0n security conference and have contributed to open-source security, including reporting multiple CVEs.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

Amazon

Mar 2024 - Present (2 years 7 months)

Conducts design security reviews and threat modeling for the Amazon Pay payments platform, acting as the security gatekeeper before launch. Partners with SDE teams to embed security-by-design across the SDLC and performs complex architecture reviews to mitigate high-risk vulnerabilities.

Security Design Reviews STRIDE Threat Modelling Security Architecture Review Application Security AWS Cloud Security Vulnerability Management Risk Analysis Security By Design Data Flow Analysis Payments Security

Senior Security Consultant

Synopsys Inc.

Jul 2021 - Feb 2024 (2 years 7 months)

Delivered security assessments for diverse enterprise clients, improving their security posture across the application portfolio. Performed hands-on security testing of 100+ web and mobile applications, identifying exploitable vulnerabilities with prioritized remediation guidance.

Penetration Testing Cloud Security Red Team Security Assessments Vulnerability Management Risk Analysis

Associate Consultant

Aujas Cybersecurity (NSE-IT)

Jul 2019 - Jul 2021 (2 years)

Executed web application, web service, thick-client, network penetration, and mobile security assessments for client engagements. Contributed to the Red Team and Cloud Security Practice.

Web Application Security WS Security Thick Client Security Network Penetration Testing Mobile Security Red Team Cloud Security