th3m0nk

I am a Senior Security Engineer with 6 years of experience across product security, application security, secure code review, threat modeling, adversarial testing, DevSecOps, and third-party security reviews. My work has focused on reducing real-world exploitability by going beyond scanner output: reviewing design and code, validating reachability, building security automation, running cyber drills with engineering and SRE teams, and helping leadership understand where risk actually exists.

At PhonePe, I am part of the Product Security function, where I work on secure code reviews for internal applications, DevSecOps visibility for engineering leadership, pre-commit controls to prevent secret leakage, third-party security reviews, and security readiness exercises. I have also built automated red-team agents for Linux and Windows environments to surface credentials, tokens, misconfigurations, and risky artifacts across infrastructure.

Before PhonePe, I worked as a Senior Security Consultant and Red Team Specialist, including consulting work for VMware. I have led secure code review programs, built threat models for enterprise products, executed penetration tests across web, cloud, network, and Windows AD environments, and mentored security engineers.

# What I Am Looking For

I am looking for product security roles in Web3 where I can build, scale, or lead the product security function. My goal is to join an engineering-focused organization where security is treated as a product and architecture problem, not just a compliance or audit checklist.

I am especially interested in roles where I can:

- Build a strong product security program from the ground up or mature an existing one.
- Own secure design reviews, threat modeling, and code review for high-impact product areas.
- Work closely with engineering leaders, architects, protocol teams, backend engineers, DevOps, and SRE teams.
- Improve vulnerability visibility through reachability analysis, risk-based prioritization, and practical DevSecOps automation.
- Design guardrails that reduce classes of bugs before code reaches production, including secrets prevention, CI/CD security checks, and dependency governance.
- Review Web3 integrations, wallets, smart contract adjacent systems, signing flows, custody flows, bridges, APIs, and third-party vendors.
- Run security drills and incident-readiness exercises so engineering teams know how to respond under pressure.
- Help the organization make better security decisions during product design, vendor onboarding, and launch readiness.

The role I am aiming for is one where I can be hands-on technically while also creating the structure, processes, and security culture needed for a strong product security function. I want to partner with engineering teams, not slow them down, and help build products that are secure by design, resilient in production, and trusted by users.