DHYAN SAGAR L
Bengaluru
Summary
Dynamic Security Researcher at Google with expertise in reverse engineering and threat detection. Proven track record in mentoring teams and automating security processes, enhancing application security standards. Successfully influenced global mobile security policies, safeguarding billions of users while driving innovative solutions in a fast-paced environment.
Overview
1
1
Certification
7
7
years of professional experience
Work History
Senior Specialist Security Engineer
Google
08.2025 - Current
- Directed technical strategy for Android security operations, mentoring security analysts and engineers while managing review processes for large contractor teams.
- Engineered automated threat detection systems with static and dynamic analysis methods to identify new malicious behavior and indicators of compromise (IOCs).
- Worked with engineering, policy, and legal teams to close product gaps and shape global Android security policies that protect billions of users.
- Helped influence global mobile security regulations through cross-functional collaboration with engineering, legal, and policy teams to protect billions of users.
- Reviewed obfuscated code and assembly to identify vulnerabilities in preloaded applications and support privacy and security standards across mobile experience.
- Supported deep reverse engineering of Android application native libraries and system binaries using IDA Pro, Radare2, Ghidra, Frida, JADX, and other open-source and commercial tools to counter threats across the Android ecosystem.
- Converted complex technical investigations into white papers and executive briefings to inform leadership and non-technical stakeholders on security findings.
- Analyzed telemetry data and system anomalies with SQL and Python to uncover abusive or unwanted software and emerging distribution trends.
- Developed internal tools and automated systems with Python and SQL to analyze telemetry streams, identify anomalies, and monitor emerging distribution trends.
- Developed AI security standards and operational guardrails to audit preloaded software, decode obfuscated routines, and uphold privacy benchmarks.
- Directed technical operations by mentoring analysts, managing large contractor reviews, and delivering executive briefings to stakeholders.
Technical Lead (Security QA)
Comviva Technologies Limited.
09.2023 - 08.2025
- Application Security Full-Spectrum Penetration Testing: Conducted end-to-end Vulnerability Assessment and Penetration Testing (VAPT) for Web, Android, and iOS applications. Identified critical flaws including SQL injection, XSS, and broken authentication using manual techniques and automated tools.
- Security Framework Mastery: Applied OWASP Top 10 and SANS/CWE Top 25 standards to ensure all applications met industry-leading security benchmarks.
- SAST & Code Auditing: Led static code reviews and managed Static Application Security Testing (SAST) tools to identify and remediate security flaws deep within the codebase before deployment.
- Threat Modeling: Performed proactive threat modeling exercises during the design phase to identify potential attack vectors and mitigate risks early in the SDLC.
- Tooling Expertise: Utilized a comprehensive toolkit including Burp Suite, Metasploit, Kali Linux, Nessus, nmap, MobSF, and Frida for both commercial and open-source security testing.
- Remediation & Training: Delivered remediation guidance to developers and conducted security awareness training, fostering secure coding practices and minimizing recurring vulnerabilities.
- Compliance & Regulatory Alignment: Assessed applications against global regulatory standards including ISO-27k, GDPR, HIPAA, PCI-DSS, SWIFT, and UPI, ensuring compliance through detailed audit trails.
- Automation: Created custom Python scripts to automate repetitive security testing tasks, enhancing assessment efficiency.
- Led technical design for telecom software solutions at Comviva Technologies Limited.
- Performed root cause analysis for production incidents and identified permanent fixes.
- Participated in architectural discussions regarding design decisions related to scalability and security.
Cyber Security Researcher
Cyber Cadets Corps.
12.2021 - 12.2023
- Vulnerability Discovery & Exploitation: Conducted deep-dive analysis into complex systems, identifying critical vulnerabilities in software, firmware, and hardware to enhance overall security posture.
- Advanced Threat Intelligence: Track and attribute sophisticated Advanced Persistent Threat (APT) campaigns by analyzing malware samples and C2 infrastructures.
- Secure Wireless Communication: Analyzed and hardened wireless protocols against interception, jamming, and spoofing, significantly improving resilience against potential attacks.
- Prototyping & Tool Development: Build custom proof-of-concept (PoC) exploits and automated security tooling in Python, C/C++, or Rust to validate research findings.
- Hardware Security Analysis: Perform side-channel analysis, fault injection, and reverse engineering on integrated circuits and embedded systems to ensure hardware-level integrity.
- Collaborative Innovation: Work alongside hardware engineers and cryptographers to design resilient architectures that are "secure by design."
- Thought Leadership: Documented findings in high-impact technical reports and represented organization at security conferences, influencing industry best practices and promoting research advancements.
Director
IFG Research and Development Private Limited.
10.2019 - 12.2021
- Identified and pursued funding opportunities from government and private sectors, securing vital resources for research initiatives and organizational growth.
- Built and maintained high-level relationships with government officials, academic institutions, and private industry partners, facilitating collaborative research and advancing shared objectives.
- Strategic Business Expansion: Conduct market analysis to identify emerging sectors—such as Critical Information Infrastructure (CII) or Automotive Security—where our threat intel and hardware expertise are needed.
- Proposal & Documentation Leadership: Oversee the creation of high-stakes documentation, including grant applications, partnership MOUs, and annual compliance audits.
- Ensured compliance for all activities and hardware labs with government and non-government standards, mitigating risk and enhancing operational integrity.
Education
Post Graduation Diploma - Cyber Law and Cyber Forensics
National Law School of India University
Master of Technology - Cloud Computing
Birla Institute of Technology and Science - Pilani
Bachelor of Engineering - Computer Science and Engineering
Visvesvaraya Technological University
High School Diploma -
Department of Technical Education, Government of Karnataka
Skills
- Malware analysis
- Vulnerability assessment
- Threat detection
- Application security
- Code auditing
- Threat modeling
- Security automation
- Security auditing
- Reverse engineering
- Security research
- Team mentoring
- Stakeholder engagement
Certification
- AWS Partner - Technical Accredited
- Skills: AWS Cloud, AWS Cloud Computing, AWS Partner, Amazon Web Services
- AWS Partner - Generative AI Essentials
- Skills: AI & ML on AWS, AWS, AWS Cloud Computing, Co-selling with AWS.
- AWS Partner - Cloud Economics
- Skills: AWS Cloud, AWS Cloud Computing, AWS Partner Network, Amazon Web Service.
- Certified in Cyber Security by (ISC)²
- Skills: Access Controls Concepts, Business Continuity Concepts, Disaster Recovery Concepts, Incident Response Concepts, Network Security, Security Operations, Security Principles.
- Certified Ethical Hacker Master v12 (Global Top 10) by EC-Council
- Skills: Footprinting, OSINT Techniques, Privilege Escalation, Steganography, Sniffing DoS/DDoS, Session Hijacking, IDS/Firewall Evasion, SQL Injection, Web Server Hacking, Web App Vulnerabilities, Wi-Fi Hacking (WPA3), Mobile Platforms (Android/iOS), Container Security, Serverless Computing, Encryption Algorithms, PKI and Cryptanalysis.
- Digital Forensics Essentials by EC-Council
- Skills: Understand Digital Evidence, Forensic Readiness, Legal Compliance (Chain of Custody), Phases of investigation (Planning, Acquisition, Reporting).
- Android Bug Bounty Hunting by EC-Council
- Skills: ADB, Android Sandboxing, SE-Linux, Android Kernel, Dalvik Virtual Machine, Android Components, Android Runtime Analysis, SSL Pinning & Certificate Handling.
- Zero Trust Principles by IBM Security.
- Skills: Architecture, Cybersecurity, PWID-B0318000, Security, Security Strategy, Zero Trust & Strategy.
- Endpoint Security by CISCO
- Skills: Antimalware Protection, Application Security, Common Cyber Threats, Defending Systems & Devices, Host-Based Intrusion Prevention, IP/TCP/UDP Vulnerabilities, Linux, Mitigating Common Network Attacks, Network Security Infrastructure, Securing WLANs, System & Endpoint Protection, Windows Security, Wireless & Mobile Device Attacks.
- Cyber Threat Management by CISCO
- Skills: Common Vulnerability Scoring System (CVSS), Disaster Recovery, Evidence Handling & Attack Attribution, Governance, Incident Response, Network & Server Profiling, Penetration Testing, Risk Assessment & Management, Security Assessment, Security Controls, The Cyber Kill Chain, The Dimond model of Intrusion Analysis, Threat Intelligence Services.
- Network Defense by CISCO
- Skills: Access Controls, Application Security, Cloud Security, Defense-in-Depth, End Device Logs, Evaluating Alerts, Firewalls, Hashing, Integrity & Authenticity, Network Hardening, Network Logs, Physical Security, Public Key Cryptography, Security Policies – Regulations – Standards, System & Network Defense.
Awards and Recognition
Ace Award by Comviva Technologies Ltd., Credo Cap Award by Comviva Technologies Ltd., Top Team Award by Comviva Technologies Ltd., Winner of Makerspace 2020 Hackathon by Infosys Ltd.
Additional or Hobby Projects
- OWASP ZAP ADB Connect
- Real-Time Emergency Support System Using Drones & IoT.
- Deepfake Detection on social media, [a bachelor's academic project]
- Rakshak [a Reinforcement Learning Model Designed to Manage Road Traffic for emergency cases (such as Ambulance or secure escort) built in/for 24hrs Infosys Makerspace 2020 Hackathon].
Timeline
Senior Specialist Security Engineer
Google
08.2025 - Current
Technical Lead (Security QA)
Comviva Technologies Limited.
09.2023 - 08.2025
Cyber Security Researcher
Cyber Cadets Corps.
12.2021 - 12.2023
Director
IFG Research and Development Private Limited.
10.2019 - 12.2021
Post Graduation Diploma - Cyber Law and Cyber Forensics
National Law School of India University
Master of Technology - Cloud Computing
Birla Institute of Technology and Science - Pilani
Bachelor of Engineering - Computer Science and Engineering
Visvesvaraya Technological University
High School Diploma -
Department of Technical Education, Government of Karnataka