About me

As a Senior Security Engineer with 6+ years of experience in the field, I have a strong background in penetration testing, cloud security, security automation, code review, security analytics, DevSecOps, IAC security, Kubernetes security, and container security. My technical skills include penetration testing of cloud, web, mobile applications, and networks, as well as threat hunting using tools such as Snypr and ELK, and patching of servers and cloud networks. I have also reported vulnerabilities to companies such as Google, Airbnb, Microsoft, AWS, Apple, Amazon, Samsung, Zomato, Xiaomi, Alibaba, Opera, Protonmail, and Mobikwik, and have received CVEs (CVE-2019-8727, CVE-2019-16918, CVE-2019-12278, and CVE-2019-14962) for my efforts. Additionally, I have experience bypassing WAFs for cloud providers such as AWS, Azure, and GCP, and have worked extensively on the setup and integration of WAFs from a security perspective. In my previous roles, I have conducted end-to-end VAPT of web and mobile applications, implemented CI/CD pipelines (DevSecOps) with various SAST/DAST tools, educated developers through in-house training programs on secure coding practices, performed network VAPT using both automated tools and manual OSINT techniques, implemented and configured ELK stacks, performed threat hunting from various data sources using ELK, Securonix Enterprise, and Snypr, worked with SIEM and UEBA solutions, conducted vulnerability assessments and penetration testing for mobile applications using OWASP Top 10 guidelines, analyzed logs using ELK, Graylog, and syslog/rsyslog, implemented and tested various backup solutions, created in-house automation tools in Bash and Python, configured DNS, VPNs (e.g. OpenVPN), and proxies (e.g. NGINX, Squid), and have expertise in IAC security, Kubernetes security, and container security. Also crew member of Defcon Cloud Village 2020/2021/2022 Location: Bengaluru #Github Link : https://github.com/justmorpheus #Medium blog for Pentesting and Linux: https://justm0rph3u5.medium.com/ #Linux Administration: http://divyanshu-techbook.strikingly.com/ #Twitter: https://twitter.com/justm0rph3u5 Divyanshu Shukla @justm0rph3u5