NEW DELHI, INDIAAVAILABLE FOR THE RIGHT PROBLEM

SECURITY ENGINEER / 01

Digvijay
Singh.

I investigate what a system is doing, why a control reacts, and where the real risk is hiding.

API SECURITY · BAS · VAPT · ZERO TRUSTEXPLORE THE RECORD ↓

01 / COMMUNITY & TALKS

MLSA · GDG · SECURITY EDUCATION

Learning in public.
Teaching in practice.

Workshop sessions, CTFs, and the moments that turned study into something shared.

SELECTED RECORD / 01

Azure Fundamentals, from first principles to secure access.

Hosted as a Microsoft Learn Student Ambassador. Covered cloud basics, deployment models, Azure core services, Azure Active Directory, and ended with an interactive quiz.

Open source ↗

02 / EXPERIENCE

SELECT A POINT ON THE TIMELINE

The work behind
the point of view.

Three roles, one growing practice: moving from testing systems to protecting and validating them in production.

Resident engineering for enterprise security programmes, working at the meeting point of application teams, security controls, operational investigations, and stakeholder decisions.

WHAT I DID

Owned day-to-day API security engineering: discovery and inventory work across applications and API gateways, including the identification of shadow and zombie APIs that need scrutiny.
Turned API traffic into a clearer risk picture by carrying out posture assessment and sensitive-data classification across request and response payloads, then translating findings into management-ready reporting.
Configured and tuned positive security models, WAF rules, rate limits, bot classification, and access policies while investigating security events and separating false positives from meaningful signals.
Coordinated the operational work surrounding security changes—policy migration, traffic-diversion dependencies, validation, troubleshooting, and the impact on legitimate application behaviour.
Delivered 5+ Picus Security POCs and deployments, validating detection and prevention coverage across EDR, firewall, WAF, email security, and DLP controls.

KEY LEARNING

Strong security engineering is not just about deploying a product. It is about tracing dependencies, reading real traffic, making a defensible decision, and leaving the system more reliable than it was before.

TOOLS & TECHNOLOGIES

Radware API SecurityCloud WAFPicus SecurityZscalerNetskope

Web application and API assessment work built around reproducing issues, proving impact, and making remediation practical for the team receiving it.

WHAT I DID

Conducted risk-based assessments for web applications and APIs, moving from reconnaissance to reproducible evidence rather than stopping at automated scanner output.
Identified and validated issues including XSS, SQL injection, and authentication or login bypass, using the appropriate tooling to understand both exploitability and business impact.
Documented attack paths, proof-of-concepts, severity rationale, and mitigation guidance so developers and non-technical stakeholders could decide what to fix first.
Practised communicating the difference between a theoretical weakness, a verified finding, and a risk that needs immediate attention.

KEY LEARNING

A finding is only valuable when the evidence is credible, the risk is intelligible, and the remediation path is realistic enough to be acted on.

TOOLS & TECHNOLOGIES

Burp SuiteNessusOWASP ZAPNmapSQLmap

A hands-on bridge between security, QA, release confidence, and the way real users experience an application.

WHAT I DID

Conducted VAPT for web applications and APIs, validating issues rather than treating scans as final answers.
Built test coverage across manual testing, API testing, Selenium automation, Postman workflows, and performance testing with Apache JMeter and k6.
Investigated defects from symptom to root cause, then converted findings into clear test cases, regression coverage, and remediation recommendations.
Learned to see quality engineering as an upstream security skill: both disciplines begin with a precise understanding of expected behaviour and failure modes.

KEY LEARNING

Security and quality are inseparable in practice. Both demand curiosity, repeatable evidence, and the discipline to keep asking what changed, why it changed, and whether the fix holds.

TOOLS & TECHNOLOGIES

SeleniumPostmanApache JMeterk6Metasploit

03 / CREDENTIALS

VERIFIABLE RECORDS

Proof of
continued practice.

Each credential links to its verification record where one is available.

Zscaler

Zscaler Digital Transformation Administrator (ZDTA)

Verify credential ↗

Zscaler

Zscaler Certified Sales Professional (ZCSP)

Verify credential ↗

Zscaler

Zero Trust Cyber Associate (ZTCA)

Verify credential ↗

Netskope

Netskope SSE Administrator

Verify credential ↗

Netskope

Netskope SASE Essentials

Verify credential ↗

Radware

Radware Cloud Application Protection Certification Exam

Verify credential ↗

Microsoft

AZ-900 Azure Fundamentals

Verify credential ↗

TryHackMe

Jr Penetration Tester Learning Path

Verify credential ↗

Postman

Postman API Fundamentals Student Expert

Verify credential ↗

04 / DEEPER WORK

CASE STUDIES / IN DEVELOPMENT

Once you know the
journey, look closer.

05 / RECOMMENDATIONS

THREE PEOPLE, THREE PERSPECTIVES

How the work
lands with people.

“He moved from power user to a key member of the tech team—taking ownership of QA, regression automation, penetration testing, user support, and requirements.”
Nikola Bozadziev ↗ / AI Manager, Generali Česká pojišťovna

“His detail orientation ensures no stone is left unturned. He is proactive, adaptable, reflective, and a teammate who uplifts the people around him.”
Anastassiya Larina ↗ / UX Designer & Business Analyst, e1133

“He combines creative problem-solving with initiative, startup-minded openness, and a serious commitment to making cybersecurity work matter in practice.”
Laura R. King ↗ / Community Engagement Consultant

Digvijay
Singh.

Learning in public.
Teaching in practice.

Azure Fundamentals, from first principles to secure access.

The work behind
the point of view.

Proof of
continued practice.

Zscaler Digital Transformation Administrator (ZDTA)