Dropbox

● Primary SME for micro-services managed by application security such as Content security policy, HTTP Headers, Authorization, SAST (Semgrep), DAST frameworks
● Act as a subject matter expert on application security domains involving web, mobile, and desktop platforms
● Conduct security consultations on new and existing products, and be able to communicate complicated issues to non-technical audiences
● Improve upon and further integrate the Secure Development Lifecycle (SDLC) into product design and engineering efforts
● Empower secure-by-default development by shipping libraries and frameworks that address classes of vulnerabilities at scale
● Assist with code reviews to proactively identify potential vulnerabilities, and follow-up with tooling to prevent future vulnerabilities

Security Software Engineer

Yelp

• Develop and deploy authentication and security related components of Yelp's website and mobile apps;
• Develop libraries used across multiple Yelp applications and services for secure
communication and data storage;
• Set policy & best practices for application security and lead security education across the engineering organization;
• Pair with other mobile, front end, and back end teams to develop features in a secure and scalable manner; and
• Validate and remediate vulnerabilities reported in our bug bounty

Software Engineer

Zoho Corporation

Tech Stack: Java, Spring Boot, MySQL, Postgresql, Gradle, Maven, JWT, JUnit, RESTful Web services, Git, Redis, Kafka, AWS, Azure, Big Data - Small Apps, Microservices, OAuth, Automation, POSTMan.

- Helped Zoho Finance framework team to implement the common tax, invoice, expense, and other feature modules across finance application. (Zoho Books, Invoice, Subscriptions, Expense, Inventory) 
- Implemented Expense module for Zoho Invoice and handled feature request, technical support by leading the team of 5+ engineers.
- Designed and released the Zoho Invoice Generator application (GST Edition) which has the traction of 500K Downloads and 100K+ Monthly Active Users.
- Implemented CI/CD Pipeline for Zoho finance suite application for improving testing, better product releases, reducing the crash rate, and improving app stability.
- Handled & implemented application security, auditing, and compliance for mobile for Global data protection and regulation  (GDPR) readiness.

Zoho Security:
- Handled Zoho Mobile security vulnerability & bug bounty program with the help of Red Team
- Found 120+ Security issues across Zoho, ManageEngine products including Remote code execution, cross-site Scripting attack, Local file inclusion.
- Helped Zoho Security team to identify mobile security issues with help of SAST scanner for 50+ applications using OWASP Mobile Top 10 attack matrix.

Products Worked:
• Zoho Books: (https://www.zoho.com/books)
Easy-to-use, online accounting software designed for businesses to manage their finances and stay on top of their cash flow.
• Zoho Invoice: (https://www.zoho.com/invoice)
Hassle-free online invoicing software designed for businesses to manage their invoices and get paid online.
 • Zoho Expense: (https://www.zoho.com/expense)
Easy to use expense management software designed for businesses to manage their business expenses, employee reimbursement, workflows and reconcile bank statements.

Member of Technical Staff

- Design and Implemented Trips feature in Zoho Expense SaaS Application
- Features and bug fix releases for Zoho Invoice and Books SaaS Application
- Handled technical support for Zoho Finance Suite products

Software Engineer Intern

Software engineer with 5 Years experience (security focused) well versed in the development, security, and deployment of distributed software applications.

- Security Engineer @ Yelp, Dropbox
- prev. founded GoSchedule.io (lead to 10 paying customers, 75k+ USD ARR)
- Security @ Zoho, teamed up for red teaming & mobile security
- Hacked Google, Dropbox, Twitter (X), Zomato, ProtonMail, Microsoft via Hackerone Platform
- Built Zoho Invoice & Generator for Android (SaaS) ( 2M+ Downloads, avg 4.8 star Rating)

Blog: https://shivasurya.me
HackerOne: https://hackerone.com/libcontainer
Google VRP: https://bughunters.google.com/profile/41d08dfc-2316-41fa-8bb0-885f5401b011

Taplio

Shivasurya S.'s Linkedin Analytics

Shivasurya S.

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Shivasurya S.'s Linkedin Analytics

Shivasurya S.

Want to drive more opportunities from LinkedIn?

Shivasurya S.'s Linkedin Analytics