Security Tech Lead, Security Assurance @ Deriv
Building and Breaking
Secure Systems.
I'm Shantanu, also known as SecurityJunky. I work on AppSec, cloud hardening, DevSecOps, and AI-driven security automation, with a current focus on security assurance and RAG-based agents that make security work easier to scale.
What I Work On
🛡️
Application Security
OSWE and OSCP-backed testing across web, mobile, and API attack surfaces.
☁️
Cloud Hardening
Security automation and CSPM across GCP, AWS, and Alibaba Cloud.
🤖
AI for Security
RAG-based agents for threat intel, vulnerability triage, and internal security workflows.
🚀
DevSecOps
Security checks that fit into delivery pipelines, from SAST and DAST to secret scanning.