Shivang Tiwari

Cybersecurity Engineer with experience in Application Security, Product Security, Cloud Security, and Security Automation. Skilled in threat modeling, vulnerability management, secure software development lifecycle (SDL), cloud security assessments, and AWS security controls. Experienced in building scalable security solutions for web, API, and cloud environments while reducing attack surface and improve risk visibility.

Application Security Engineer - Sun King

(2025-06)

• Manual & Automated VAPT assessments performed across Web Applications, Mobile Apps & Infrastructural resources.
• Performed SAST scanning & established CI/CD pipelines for continuous SAST scanning in all organizational repositories & codebases.
• Onboarded WAF (Cloudflare) to all Sun King domains & implemented various Security Rules to secure intranet & internet facing traffic. Built multiple dashboards for teams to easily gather insights and improve operational efficiency & debugging with ease-of-use.

Software Security Engineer - I - Astra Security

(2025-06)

• Architected and built an AI-powered autonomous penetration testing platform from the ground up using Mastra, TypeScript, Claude Agent SDK, and RAG, capable of end-to-end web & API vulnerability detection without human intervention.
• Evaluated attack surfaces, security risks, and misconfigurations across web, API, and cloud environments to improve overall security posture. Developed detection logic and monitoring capabilities for identifying security weaknesses across cloud and application environments also providing visibility into security weaknesses, misconfigurations, and remediation requirements relevant to frameworks such as SOC 2, OWASP ASVS, PCI DSS, and secure SDLC programs.

SDE Security Intern - Astra Security

(2025-02 - 2025-06)

• Enhanced infrastructure for the DAST scanner for Web & API based vulnerability detections, gaining deep expertise in OWASP ZAP. Produced security findings, risk analyses, and remediation recommendations for engineering teams, enabling informed security decisions and prioritization.

President - Association Of Computer Enthusiasts

(2022-12 - 2025-05)

• Leading a 500+ member community, organizing workshops, projects, and major technical events like ACECTF1.0 & HackVSIT 6.0. ACECTF1.0 had over 2,000 players worldwide and this experience really helped me understand the full lifecycle stack of any application in the cloud environment.

Master of Computer Applications - Cybersecurity - Amity University Online (2025 - 2027)

Bachelor of Computer Applications - Guru Gobind Singh Indraprastha University (2022 - 2025)