Shivang Tiwari
Security Engineer (Red Team Research & Offensive Security)
//Summary
Dynamic Security Engineer with a strong foundation in VAPT and offensive security engineering. Experienced in building and automating detection logic for web, API, and cloud (AWS) environments, collaborating across pentest and product teams to deliver scalable, secure systems. Focused on red team security research with practical automation.
//Skills & Tools
>Additional expertise:
//Experience
SDE - I (Security)
Astra SecurityContributing to AttackAI, an AI-powered vulnerability detection engine for web, API, and cloud environments. Leading scanner team roadmap, attack path design, and implementation for DAST (Web/API) and cloud offsec checks.
SDE Security Intern
Astra SecurityEnhanced DAST infrastructure for web and API vulnerability detection. Built secure, modular automation in Python/Java/JavaScript integrated with YAML-based detection pipelines.
Led a 500+ member technical community at VIPS-TC, New Delhi. Organized flagship events including ACECTF 1.0 (Jeopardy CTF, 659 teams), HackVSIT 5.0 & 6.0 (North India's biggest hackathon), and multiple workshops, mentoring juniors and coordinating cross-team operations.
//Events Organised & Volunteered
North India's biggest hackathon at VIPS-TC, New Delhi. 24-hour hackathon with 6 themes, featuring sponsors like Astra Security, Polygon, ETHIndia, and Aptos. Managed operations, logistics, and judging across 300+ participants.
ACE's inaugural Jeopardy-style CTF tournament hosted on CTFTime. 659 teams participated globally across Web, Pwn, Cryptography, Reverse Engineering, OSINT, Binary Exploitation, and Digital Forensics categories. Sponsored by EC-Council, .xyz Domains, and Bounty Security.
Organized the Smart India Hackathon 2024 Grand Finale node at VIPS, New Delhi. Coordinated logistics, mentoring, and judging for participating teams.
North India's most influential hackathon at VIPS. Coordinated on-ground operations and participant support for the 24-hour hackathon.
Organized the annual Technical Day celebration at VIPS-TC featuring workshops, tech talks, and live demos.
//Achievements
BFCET Hack 2024 — Runners Up
2024Runner up in the BFCET Hack 2024 hackathon held in Bathinda, Punjab as part of Team CodeX.
//Projects
SafeDocs
Jul 2024 - Sep 2024Privacy-focused web application that securely detects and extracts PII from documents (PDFs/images) with a strong emphasis on data security and compliance.
KarvIt
Jan 2024 - Apr 2024Python-based GUI tool for file carving from disk images, useful for digital forensics, data recovery, and incident investigations.
//Education
Master of Computer Applications (Cybersecurity)
2025 - 2027Amity University Online
Remote program focused on advanced cybersecurity coursework.
Bachelor of Computer Applications
2022 - 2025Guru Gobind Singh Indraprastha University
Cybersecurity specialization with GPA 8.9.