I’m an Application Security Engineer at PhonePe, where I assess web, mobile, and API systems, lead threat modelling and security design reviews, and run secure code reviews across Java, Python, and JavaScript codebases. A big part of my work is triage — figuring out which findings are genuinely exploitable and helping engineering teams fix those first.

I started in cyber threat intelligence at CloudSEK, tracking ransomware groups, phishing campaigns, and criminal underground forums for 40+ clients, then moved into third-party risk and attack surface management before transitioning into application security. That path gives me an unusual vantage point: I’ve seen how attackers actually operate, so I test applications the way they would.

Beyond my day-to-day work, I’m an active speaker and panel moderator at conferences like Black Hat MEA, BSides, and c0c0n, and I contribute to security communities including Null, WiCyS, CSA, InfoSec Girls, and The Hackers Meetup.