Kanishka Sahoo
I build security automation that finds problems early and backend systems that shut them down.
Application security, product security, incident response.
Selected impact
- faster incident triage
- 75%
- faster vendor-risk assessment
- 90%
- engineers supported
- ~200
What I work on
Application Security
Web and API security: authentication, authorization, secure design, and testing that hunts real vulnerabilities.
Security Automation
Tools that compress incident response, risk review, and the repetitive work that slows security teams down.
Security-Focused Backend Engineering
APIs, data systems, and controlled execution designed for security products, not bolted on after.
Experience
- Aug 2026 - Now
Software Engineer Intern · Seceon
Building backend systems and security automation for a cybersecurity platform.
- Jan - Jul 2026
Security Engineering Intern · GoTo
Built incident search, vendor risk, and configuration management tooling. Cut triage time by 75% and assessment time by 90%, across workflows used by roughly 200 engineers.
- Jul - Aug 2025
SOC Intern · PESU-ISFCR
Analyzed phishing, account takeover, and spoofing campaigns. Built a real-time filter that blocks malicious email before it reaches the inbox.
- Jul - Aug 2024
Research Trainee · PESU-ISFCR
Forensic research on Google Drive Desktop artifacts across install, use, and uninstall.
Projects
- 01Security Automation & Testing PlatformAuthorized testing workspace built on FastAPI, PostgreSQL, WebSockets, and pgvector, running isolated Kali containers with target allowlisting and controlled tool execution. (opens in a new tab)
- 02IoT Honeypot & Anomaly DetectionSSH honeypot feeding an ML pipeline that classifies hostile traffic and blocks it automatically. (opens in a new tab)
- 03LinkifySecure link platform with team RBAC, passkeys, TOTP, rate limiting, bot detection, and scoped API access. (opens in a new tab)
- 04S3 DuckyESP32-S3 HID research tool that executes DuckyScript payloads with controlled upload modes. (opens in a new tab)
- 05Gym & Fitness Studio CRMMulti-tenant CRM with isolated PostgreSQL data models, subscriptions, attendance, billing, and role-based workflows.Proprietary
Technologies
Security
Application Security · API Security · Product Security · Incident Response · Threat Detection · Vulnerability Assessment
Engineering
Python · TypeScript · SQL · FastAPI · React · PostgreSQL · WebSockets · REST APIs
Platform
Docker · Kubernetes · GitHub Actions · Linux · CI/CD
Security Tools
Nmap · Kali Linux · CICFlowMeter · Honeypots · DuckyScript
Education
B.Tech, Computer Science · Cyber Security & Connected Systems
PES University · 2022-26