Profile banner
Aseem Shrey

Aseem Shrey

Founder of ShipSecAI & SecureMyOrg, Security Engineer, Cybersecurity Educator

Pittsburgh, Pennsylvania, United States
sessionize+1
San Francisco, California, United States
nitter
Patna, Bihar, India
aseemshrey
Joined August 2025
Favicon imageaseemshrey.in
Favicon imagelinkedin.com
Favicon imagex.com
Favicon imagegithub.com
Favicon imageaseem-shrey.medium.com
Favicon imageyoutube.com

Network

16K connections
🇮🇳
Indian Startup Ecosystem Professionals
💡
Startup Founders & Leaders
💻
Software Engineers
🔒
Cybersecurity Professionals
🛒
Blinkit Engineering & Product
💰
Fintech/Startup
📊
Data & AI

Summary

Aseem Shrey is a dedicated cybersecurity entrepreneur and engineer, currently building two companies: ShipSecAI, an AI-powered security copilot, and SecureMyOrg, a cybersecurity consulting firm. His work focuses on automating security functions, providing tailored solutions, and enhancing product security for businesses. sessionize+1
Aseem possesses a strong technical background in security engineering, with experience at major companies like Rippling, Yahoo, Gojek, and Blinkit. He has implemented vulnerability management systems, automated DAST processes, performed threat modeling, conducted penetration tests, and optimized Python tooling for security systems. toptal+1
Beyond his corporate roles, Aseem is a passionate cybersecurity educator and content creator. He runs 'HackingSimplified' on YouTube, teaching ethical hacking and security engineering, and frequently publishes detailed articles on Medium about security vulnerabilities, ethical hacking findings, and industry best practices. aseemshrey+2
His expertise extends to offensive security, having responsibly disclosed critical vulnerabilities to significant organizations including the U.S. Department of Defense, the Government of India, IBM, Sony, and General Motors. He has also led red team engagements focusing on cloud, web, and endpoint security. sessionize+1
Aseem is adept at leveraging automation and modern cloud technologies (AWS, GCP, Azure) to build robust and secure infrastructure. He has experience with CI/CD pipelines, Docker, Kubernetes, Terraform, and various security testing tools, emphasizing the importance of integrating security into development workflows. toptal

Work

Education

Projects

Writing

Manipulating India’s Stock Market: The GST Portal Data Leak

September 3, 2025

Discusses how a data leak in the GST Portal could lead to Indian stock market manipulation.

Favicon imageaseem-shrey.medium.com

Compliance As Code How We Automate CIS Compliance For GCP

September 21, 2021

Describes how the Product Security team automated CIS compliance for Gojek's scale.

Favicon imageaseem-shrey.medium.com

Abusing Report Abuse

October 31, 2020

Originally posted on his personal website, this article discusses exploiting 'report abuse' functionalities.

Favicon imageaseem-shrey.medium.com

One Token to leak them all : The story of a $8000 NPM_TOKEN

June 19, 2020

A story about a critical vulnerability involving an NPM token.

Favicon imageaseem-shrey.medium.com

Attention to Details : Finding Hidden IDORs

February 29, 2020

Explores how a travel portal's customer PII data could have leaked through remnant functionalities, leading to the discovery of IDORs.

Favicon imageaseem-shrey.medium.com

Mind your Logs : How a build log from a Jenkins leaked everything

December 9, 2019

Details how an inconspicuous Jenkins log could leak sensitive information.

Favicon imageaseem-shrey.medium.com

Hobbies

Enjoys adventure and traveling, with scuba diving being a notable activity. aseemshrey

Likes running and swimming, though has been irregular recently. aseemshrey+1

An avid ethical hacker and CTF player with NULLKrypt3rs, passionate about web app exploitation and reverse engineering. medium