Danish Siddiqui

Senior Product Security Engineer

Danish Siddiqui

Danish Siddiqui

I build security programs and the tools that make them work.

Founding security engineer at Licious.
AppSec, cloud security, and DevSecOps.

Explore my work Email me

Bengaluru · Open to global opportunities

Selected work / 01–03

Built, shipped, and put to work.

All case studies

01 / Security program

Licious

Built the security function as the first dedicated security engineer.

DeliveredShared controls, clear owners, and a repeatable path to remediation.

Inside the security program

02 / Open-source product

SecOps Dashboard

Designed and built a workspace for investigating and triaging findings.

DeliveredA self-hosted product with public code, releases, and operating docs.

Explore the product & demo

03 / Product architecture

CyberShield360

Owned the architecture and helped launch Invia’s attack surface product.

DeliveredA launched product connecting discovery, exposure, and prioritization.

Explore the workflow & tour

Research with public credit

10 selected CVE advisories.

Research acknowledged by Traccar and Dovecot’s publisher.

Explore findings and acknowledgments
TraccarSVG upload · CVE-2026-25648 DovecotMIME parsing · CVE-2026-27859

Let’s work together

Building a product security function?

I’m open to senior security engineering and technical leadership opportunities.

Email Danish Read my résumé

A little more background

Experience Licious · Halodoc · Invia · FireCompass
  1. May 2025 – Present

    Licious

    SDE-3, Product Security · Founding Security Engineer

    Established the Product Security function across AppSec, AWS, DevSecOps, bug bounty, and ISO 27001 readiness.

  2. Dec 2023 – May 2025

    Halodoc

    SDET-2, Product Security

    Built custom Semgrep rules, integrated security checks into delivery, and assessed applications and AWS environments.

  3. Sep 2022 – Nov 2023

    Invia

    Senior Security Engineer

    Designed and launched CyberShield360, an attack surface management product.

  4. Jul 2021 – Sep 2022

    FireCompass

    Security Analyst / Consultant

    Delivered continuous red teaming and external attack surface assessments for enterprise customers.

  5. Jun 2019 – Jul 2021

    Vast Dreams · Codec Networks

    Earlier security consulting roles

    Assessed web, API, mobile, and thick-client applications for clients in India and Australia.

Certifications CKA · CKS · AWS Security – Specialty
  • CKS · Linux Foundation · 2026
  • CKA · Linux Foundation · 2026
  • AWS Certified Security – Specialty

Listed in my résumé.