Mohammed Imran
Founder And Lead Trainer at null The Open Security Community
Singapore
Summary
🤩
Rockstar🎓
Top SchoolMohammed Imran is a security-first software leader and founder with 11+ years of experience building DevSecOps training, tooling, and secure software practices across startups and enterprises. As Founder and Lead Trainer at Practical DevSecOps and CTO of Hysn, he blends hands-on application security (penetration testing, secure code review, threat modeling) with infrastructure-as-code expertise demonstrated in contributions to DefectDojo deployments. He previously led security programs at Autodesk and Zendesk, automating SAST/IAST in CI/CD and creating secure SDLC dashboards and trainings used across global teams. A community builder who launched and grew null chapters in Singapore and Hyderabad to 3,000+ members and 50+ events (Best Chapter Award), he also authors open-source projects like Awesome-Fuzzing and has published exploits on Exploit-DB. Based in Singapore, he pairs entrepreneurial drive with practical technical depth, teaching security through labs, certifications, and real-world tooling.
11 years of coding experience
8 years of employment as a software developer
Master's degree Computer Science, Master's degree Computer Science at Gokaraju Rangaraju Institute of Engineering and Technology
Github Skills (16)
ansible-galaxy10
docker10
nginx10
python10
dockers10
cicd10
django10
ansible10
security9
devsecops9
automation9
automations9
api8
kubernetes8
kubernetes-pods8
Programming languages (7)
Github contributions (5)
DefectDojo/django-DefectDojo
Nov 2017 - May 2018
DevSecOps, ASPM, Vulnerability Management. All on one platform.
Role in this project:
DevOps Engineer & Backend Engineer
DevOps Engineer & Backend EngineerContributions:16 commits, 9 PRs, 23 comments in 6 months
Contributions summary:Mohammed's contributions primarily revolve around setting up and configuring the deployment environment for the Django application, defectdojo. This includes writing provisioning scripts using Ansible to configure production settings and the nginx webserver, indicating a strong focus on infrastructure-as-code. They also modified the Django settings to disable the DEBUG flag for production and linked the API Key and docs to the user profile. Furthermore, the user modularized travis for parallel execution.
pythondjangovulnerability-managementbugbountydefectdojo
hysnsec/awesome-threat-modelling
Dec 2019 - Dec 2022
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
Contributions:23 reviews, 40 commits, 32 PRs in 2 years 11 months
threat-modelingsecurityvideospaidreview
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.