Santhosh Adiga

Security-focused Technical Leader and Author with 12+ years of experience architecting, hardening, and monitoring enterprise ecosystems. I specialize in bridging the gap between client-side architecture, cloud server defense, and SOC threat detection.

Senior Software Engineer | CoinDCX

March 2025 – Present

Security-First Architecture: Directed the architectural design of critical trading modules using a Security-by-Design approach, ensuring all Flutter-native bridges (MethodChannels) are hardened against injection and tampering.

Vulnerability Assessment (SAST/DAST): Integrated Snyk, Checkmarx, and MobSF into the CI/CD pipeline to automate the detection of hardcoded secrets and insecure cryptographic implementations.

Threat Modeling: Spearheaded STRIDE-based threat modeling for high-stakes features including wallet management and real-time market data streams, identifying 15+ architectural flaws before deployment.

Secure Data Handling: Engineered secure storage protocols for private keys and session tokens using AES-256 encryption and platform-specific secure enclaves (Keystore/Keychain).

Traffic Analysis: Audited WebSocket and REST API contracts using Burp Suite Professional and Charles Proxy to ensure resilient encryption and prevent Man-in-the-Middle (MitM) attacks.

Founder & CEO | Anakramy

August 2024 – Present

Offensive Security Operations: Personally conducted black-box and grey-box penetration tests across Web, Mobile, and API environments using Burp Suite, Nmap, FFUF, and Metasploit.

Automated Pentesting (Aegis): Architected Anakramy Aegis, an automated vulnerability scanner leveraging Nuclei and custom Python scripts to detect 40+ vulnerability types with CVSS v3.1 prioritized reporting.

Vulnerability Research: Reported 100+ valid vulnerabilities (IDOR, SQLi, SSRF, and Logic Flaws) across global bug bounty platforms including HackerOne, YesWeHack, and Intigriti.

Security Consulting: Delivered executive-level remediation strategies and risk impact analysis based on OWASP MASVS and NIST frameworks for enterprise clients.

Principal Engineer | Fyers

September 2023 – August 2024

Reverse Engineering: Performed deep-technical binary analysis of mobile applications using Ghidra and JADX-GUI to identify obfuscation gaps and logic flaws in the trading engine.

Security Foundation & Mentorship: Established the company’s first Secure Coding Standards, mentoring a team of 20+ developers on patching vulnerabilities like insecure data storage and token leakage.

Runtime Protection: Implemented Frida and Objection scripts during security assessments to test application resilience against SSL pinning bypass and root/jailbreak detection.

Senior Software Engineer | AP Moller Maersk

May 2021 – August 2023

Secure Product Development: Served as the lead security reviewer for global logistics modules, conducting manual secure code reviews and SonarQube audits for all third-party Flutter plugin integrations.

Incident Response Support: Collaborated with the global SOC team to provide forensic analysis of mobile-side telemetry using Wireshark to distinguish between legitimate users and botnet traffic.

Vulnerability Remediation: Directed the triage and patching of critical findings in the mobile ecosystem, ensuring high-availability and security for global supply chain operations.

Lead Engineer | Aeione

January 2020 – April 2021

Led the stabilization and security hardening of the Spotlight application.

· Implemented secure storage, encrypted communications, and secure authentication flows.

· Led secure code reviews and integrated mobile penetration testing into CI/CD pipelines.

· Addressed critical vulnerabilities related to data leakage and insecure network communication.

Software Engineer | Critical Start

March 2019 – December 2019

Contributed to the Mobile SOC platform, the world's first mobile cybersecurity response platform.

· Built UI components using modern mobile frameworks for security operations workflows.

· Supported Red Team test cases by developing secure communication modules for field operatives.

Technical Associate | Accion Labs, Bangalore

February 2015 – February 2019

Developed multiple Android applications in the FinTech space with a focus on secure transaction handling.

· Built and shipped production FinTech applications with stringent security requirements.

· Fixed critical security bugs related to data leakage, imprope r SSL implementation, and insecure API communication.