Anshuman Bhartiya

Staff Security Engineer at Lyft

San Diego, California, United States
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

🤩
Rockstar
🎓
Top School
Anshuman Bhartiya is a Staff Security Engineer with 11+ years of hands-on experience building security programs, automations, and scalable testing platforms across companies like Lyft, Atlassian, Intuit, and Nuna. He specializes in bootstrapping Product and AppSec programs from 0→1, automating vulnerability and cert management, and integrating security into cloud-native CI/CD and containerized environments. A pragmatic tinkerer and author, he co-hosts The Boring AppSec, publishes technical and reflective writing, and shares security tooling and projects on GitHub (including automation and red-team frameworks). He combines offensive and defensive experience—red team, RASP, pentesting programs, and platform-level mitigations—to drive measurable risk reduction. Based in San Diego, he also advises startups and participates in AI and global cyber professional networks, revealing a curious blend of community leadership and deep engineering craft.
code11 years of coding experience
job12 years of employment as a software developer
bookMasters in Computer Science Information Assurance & Security, Masters in Computer Science Information Assurance & Security at Arizona State University
stackoverflow-logo

Stackoverflow

Stats
131reputation
7kreached
2answers
3questions
github-logo-circle

Github Skills (155)

penetration-testing10
slack-bot10
testing10
security10
mlops10
git-secret10
cloud-native10
automation-framework10
k8s10
dns-record10
data-engineering10
docker-compose10
github-api10
credentials10
kubernetes10

Programming languages (13)

JavaCSSCScalaGoHTMLTypeScriptHCL

Github contributions (5)

github-logo-circle
anshumanbh/brutesubs

Sep 2016 - Aug 2021

An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose
Contributions:4 releases, 22 commits, 4 PRs in 4 years 11 months
automation-frameworkdocker-compose
anshumanbh/tko-subs

Oct 2016 - Jan 2021

A tool that can help detect and takeover subdomains with dead DNS records
Contributions:2 reviews, 52 commits, 21 PRs in 4 years 3 months
dns-record
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial