About

I am Vaibhav Jain, a security engineer who builds the delivery pipeline and secures it — DevSecOps and platform work on one side, application security and digital forensics on the other. I do DevSecOps because I did forensics first: I know what the incident looks like on the other side of the pipeline I am gating, which is what tells me which findings are worth blocking a deploy over and which are noise. I am currently reading for an M.Sc. in Digital Forensics and Information Security at the National Forensic Sciences University, with coursework in web application security, malware analysis, and network security forensics.

Most recently I was back at Ekvayu Tech, a deep-tech security company in Noida, on the build side: a seven-stage GitLab CI pipeline where secret, SAST, container, and image scanning gate the deploy rather than following it, Prometheus and Grafana over a hundred-odd Docker Compose containers across three sites, and the firewall hardening and VLAN segmentation underneath. My first stint there was the offensive one — VAPT against the company's own security tooling, with more than fifteen critical findings remediated. Before either, I built systems rather than broke them: a member portal for a 970-member housing society, an authentication layer on Spring Boot and Keycloak, and internal tooling on the Microsoft Power Platform.

I hold a B.S. in Computer Science from California State University, Sacramento. The useful part of that background is the overlap — I audit web applications with the instincts of someone who has had to ship and maintain them.

If you are hiring for DevOps, DevSecOps, application security, or digital forensics, or you just want to compare notes, get in touch.