Neeraj Sonaniya
Senior Security Engineer at GoDaddy
Madhya Pradesh, India
Summary
🤩
Rockstar🎓
Top SchoolNeeraj Sonaniya is a Senior Security Engineer with a decade of hands-on experience securing products across edTech and travel, currently driving enterprise and AI security initiatives at GoDaddy. He combines deep technical skills—secure SDLC, secure code review, threat modeling, pentesting, mobile app security and DevSecOps—with practical automation experience, having built tools for secret hunting, subdomain discovery and SAST orchestration. At Unacademy and redBus he led product security programs, automated complex security workflows, and ran bug bounty and monitoring operations that reduced exposure from leaked repos and misconfigured cloud assets. An active open-source contributor, he authored SubDomainizer—a Python tool that evolved to detect cloud URLs and search for secrets across JS and GitHub—demonstrating an emphasis on scalable reconnaissance and remediation. With an MTech in Mathematics and Computer Science and strong cross-team communication, he blends rigorous technical analysis with product-focused collaboration to find and fix critical issues at scale.
10 years of coding experience
5 years of employment as a software developer
Bachelor of Technology (B.Tech.), Computer Science, Bachelor of Technology (B.Tech.), Computer Science at Madhav Institute of Technology and Science, GwaliorHigh School, Mathematics, High School, Mathematics at Lady Ansuiya Singhania Educational Academy (LASEA) Jhalawar, RajasthanMaster of Technology - MTech, Mathematics and Computer Science, Master of Technology - MTech, Mathematics and Computer Science at Indian Institute Of Information Technology Allahabad
Stackoverflow
375reputation
507kreached
12answers
3questions
Github Skills (21)
python10
security-txt10
enumeration10
http-request10
enumerate10
subdomain10
security-scan10
rel9
beautifulsoup9
re29
argparse8
security8
subnet6
fileio6
php6
Programming languages (8)
Github contributions (5)
nsonaniya2010/SubDomainizer
Nov 2018 - Oct 2021
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:6 releases, 93 commits, 12 PRs in 2 years 11 months
Contributions summary:Neeraj primarily contributed to the development of the core functionality of the `subdomainizer` tool. They wrote the initial Python script, `SubDomainizer.py`, which included argument parsing, URL fetching, and subdomain extraction logic. Subsequent commits refined this script, adding features such as cloud service URL detection, secret key searching within Javascript files, and GitHub API integration for retrieving subdomains and secrets. The user also addressed SSL certificate issues and improved overall performance of the tool.
interestingbugbountyjavascript-filess3-bucketsecurity-tools
nsonaniya2010/testing
May 2017 - May 2023
Contributions:41 pushes, 1 branch in 6 years
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.