ruben@secops:~$

ruben@secops:~$ whoami

Ruben Abraham Shibu

Application Security Engineer · DevSecOps · VAPT · Secure SDLC

Application Security Engineer with 4+ years securing enterprise software at Synopsys, Black Duck and now Ultraviolet Cyber. I lead web, Android, API and network penetration tests, run SAST, IAST and SCA inside CI/CD pipelines, and turn findings into fixes developers actually ship. CEH v11 certified, fluent across Java, Python, JavaScript, TypeScript, C# and C++ codebases, with growing depth in Azure security, cloud configuration review and AI/LLM security testing. Currently pursuing an M.Tech in Software Systems (Cyber Security) at BITS Pilani and chairing IEEE Future Networks for the Kerala Section.

CEH v114+ yearsVAPT · SAST · IAST · SCAAzure · ISO 27001 · GDPR · DPDP

github.com/rubenshibu ↗

ruben@secops:~$ cat focus.log

What I Work On

01 · APPSEC

Application Security

Web, API, mobile and network penetration testing end to end — plus secure code review, IAST, DAST and SCA across the SDLC so findings get fixed, not just filed.

02 · AI / ML

AI Pentesting

Probing LLM-backed apps and AI pipelines for prompt injection, data leakage and the new class of failure modes that traditional AppSec testing misses.

03 · CLOUD

Cloud Security

Cloud configuration reviews and cloud security testing to catch misconfigurations and excess privilege before attackers do.

04 · COMPLIANCE

Security Compliance & SecOps

Embedding security operations and compliance checks into CI/CD pipelines, so secure practices scale with the team instead of bottlenecking it.

05 · RESEARCH

Security Research

Digging into emerging attack techniques, writing up findings, and contributing to the wider community through IEEE and Cyberdome.

ruben@secops:~$ cat experience.log

Experience

OCT 2025 — PRESENT

Consultant, Offensive Security Services — Ultraviolet Cyber, Bangalore

End-to-end web, Android and network penetration testing, plus REST/SOAP API security assessments
Mobile app testing covering auth, insecure storage and communication flaws
SAST/IAST/SCA across Java, Python, TS, JS, C#, C++ using Checkmarx, Seeker and Black Duck
Advisor on secure coding, threat modeling and vulnerability management for enterprise clients

OCT 2024 — OCT 2025

Cyber Security Consultant — BlackDuck, Bangalore

Web, mobile and network penetration testing using Burp Suite, ZAP and standard frameworks
Embedded security into Secure SDLC / CI-CD pipelines, remediating automated tool findings
Delivered SCA with Black Duck and CheckmarxOne for open-source risk and license compliance

JUL 2022 — OCT 2024

Cyber Security Consultant — Synopsys, Bangalore

Web application and network penetration testing, internal and external
Secure code review and SAST across multiple languages, manual and tool-assisted
IAST with Seeker and SCA with Black Duck / CheckmarxOne

ruben@secops:~$ ls skills/

Skills

OFFENSIVE / TESTING

Burp SuiteZAPMobSF NMAPNessusKali Linux VAPTNetwork Pentesting

APPSEC / DEVSECOPS

SASTDASTIAST — Seeker SCA — Black DuckCheckmarx / CheckmarxOne Secure Code ReviewSecOps

CLOUD / AI / COMPLIANCE

Cloud Security TestingCloud Config Review AI/ML Security TestingAI-Assisted Pentesting Security ComplianceAzure SecurityIAM / RBACISO 27001GDPRDPDP

LANGUAGES

PythonJavaC / C++ / C# JavaScriptTypeScript

PRACTICE

Vulnerability RemediationCompliance Threat ModelingOWASP Top 10Incident ResponsePublic Speaking

ruben@secops:~$ cat education.log volunteering.log

Education & Involvement

M.Tech, Software Systems (Cyber Security) — BITS Pilaniexp. 2028
B.Tech, Computer Science — APJ Abdul Kalam Technological University2022
Chair, IEEE Future Networks — Kerala Section2025 —
Treasurer, IEEE ComSoc Kerala Chapter2023 —
Student Cadet, Kerala Police Cyberdome2019 —

ruben@secops:~$ mail --contact

Contact

rubenabrahamshibu@gmail.com

/in/rubenshibu

GITHUB

/rubenshibu

LOCATION

Kerala, India

ruben@secops:~$

ruben@secops:~$ cat resume.md

Resume

Download PDF

summary

Cybersecurity professional and Certified Ethical Hacker (CEH v11) with 4+ years in application security, offensive security, Secure SDLC, DevSecOps, vulnerability management and enterprise consulting. Hands-on across web, Android, REST/SOAP API and network assessments; SAST, IAST, SCA, secure code review, threat modeling and remediation. Secures CI/CD workflows with Checkmarx, Checkmarx One, Seeker and Black Duck, with working knowledge of Azure security, cloud configuration review, IAM/RBAC, PII protection, ISO 27001, GDPR and DPDP.

core competencies

Application & API Security: Web and Android testing, REST/SOAP API security, OWASP Top 10, authentication and authorization testing, secure code review, threat modeling
DevSecOps & Secure SDLC: CI/CD security, SecOps, SAST, IAST, SCA, vulnerability triage, remediation validation, secure coding guidance
VAPT & Security Testing: Burp Suite, OWASP ZAP, MobSF, Nmap, Nessus, Kali Linux, network penetration testing, vulnerability assessment
Governance, Privacy & Risk: ISO 27001, GDPR, DPDP, risk assessment, incident response, data protection principles
AI Security: LLM security awareness, responsible AI usage, AI-assisted penetration testing

experience

OCT 2025 — PRESENT

Offensive Security Services, Consultant — Ultraviolet Cyber, Bangalore

Lead end-to-end web, Android, internal/external network and REST/SOAP API penetration tests using Burp Suite, OWASP ZAP, MobSF, Nmap and Nessus.
Assess authentication and authorization controls, insecure data storage and communications, input validation, business-logic flaws and sensitive-data exposure, with reproducible evidence and risk-based remediation guidance.
Perform manual and tool-assisted secure code review, SAST and IAST across Java, Python, JavaScript, TypeScript, C#, C++ and C using Checkmarx and Seeker.
Embed security into Secure SDLC and CI/CD by triaging automated findings, validating fixes and supporting closure with engineering teams.
Deliver SCA with Black Duck and Checkmarx One for vulnerable open-source components and license-compliance risk.
Advise enterprise clients on threat modeling, secure coding and vulnerability prioritization, while supporting cloud configuration review and Azure security capability development.

OCT 2024 — OCT 2025

Cyber Security Consultant — Black Duck, Bangalore

Delivered Professional and Managed Security Services for enterprise customers: assessment execution, technical reporting, remediation support and retesting.
Integrated SAST, IAST and SCA into SecOps and CI/CD workflows with Checkmarx, Checkmarx One, Seeker and Black Duck.
Ran web, mobile, API and network penetration tests focused on OWASP Top 10 risks, access-control weaknesses, insecure configurations and data exposure.
Performed secure code review across seven languages, translating findings into practical developer guidance.
Supported vulnerability management: severity validation, root-cause discussions, prioritization, remediation tracking and closure verification.
Contributed to emerging cloud security and cloud configuration review offerings.

JUL 2022 — OCT 2024

Cyber Security Consultant — Synopsys, Bangalore

Executed web application and internal/external network penetration testing with Burp Suite and industry-standard methodologies.
Performed SAST and secure code review using Checkmarx and manual analysis; ran IAST with Seeker and SCA with Black Duck and Checkmarx One.
Wrote security reports with evidence, business impact, severity, remediation and verification results for technical and non-technical stakeholders.
Worked with development and security teams to resolve findings across the SDLC, building a foundation in client-facing security delivery.

education & certification

M.Tech, Software Systems (Cyber Security) — BITS Pilani, Work Integrated Learning Programmeexp. 2028
B.Tech, Computer Science — APJ Abdul Kalam Technological University (CGPA 7.29/10)2022
Certified Ethical Hacker (CEH) v11EC-Council

leadership & volunteering

Chair, IEEE Future Networks Technical Community — Kerala Section2025 —
Treasurer, IEEE ComSoc — Kerala Chapter2023 —
Student Cadet, Kerala Police Cyberdome2019 —
Volunteer, Next Guard Cyber Security Awareness Community

ruben@secops:~$

Ruben Abraham Shibu

What I Work On

Application Security

AI Pentesting

Cloud Security

Security Compliance & SecOps

Security Research

Experience

Consultant, Offensive Security Services — Ultraviolet Cyber, Bangalore

Cyber Security Consultant — BlackDuck, Bangalore

Cyber Security Consultant — Synopsys, Bangalore

Skills

OFFENSIVE / TESTING

APPSEC / DEVSECOPS

CLOUD / AI / COMPLIANCE

LANGUAGES

PRACTICE

Education & Involvement

Contact

Blog

Resume

Offensive Security Services, Consultant — Ultraviolet Cyber, Bangalore

Cyber Security Consultant — Black Duck, Bangalore

Cyber Security Consultant — Synopsys, Bangalore

Research