Shivasurya S
Senior Software Engineer at Carta
Waterloo, Ontario, Canada
Summary
🤩
Rockstar🎓
Top SchoolShivasurya S is a Senior Software Engineer with 11 years of experience focused on application and product security, identity, and full-stack engineering across companies like Sourcegraph, Dropbox, Yelp, and Carta. He builds pragmatic security tooling and automation—authoring Sherlock for AI-powered security code reviews, integrating Semgrep SAST and secret-scanning workflows, and hardening gitserver code to prevent arbitrary file reads. At Carta he leads self-serve SSO and runs authn/authz/identity services on-call, while earlier work includes large-scale feature delivery and CI/CD at Zoho (including an invoice app with 500K downloads). Equally comfortable in frontend, backend, and DevOps, he contributes to notable open-source projects such as Sourcegraph’s Cody/code-search stack and emphasizes secure-by-default libraries and developer-friendly security integrations. Based in Waterloo, he pairs a Master’s in Computer Science with hands-on incident triage and proactive pentesting, making him a practical bridge between engineering and security.
11 years of coding experience
6 years of employment as a software developer
Udacity Android Nanodegree Graduate, Android Development, Udacity Android Nanodegree Graduate, Android Development at UdacityBachelor’s Degree, Information Technology, Bachelor’s Degree, Information Technology at Thiagarajar College of EngineeringMaster's degree, Computer Science, Master's degree, Computer Science at University of Waterloo
English, Tamil
Stackoverflow
113reputation
18kreached
4answers
4questions
Github Skills (25)
code-search10
semgrep10
sourcegraph10
cicd10
go10
backend10
devops10
security-scan10
dockers9
docker9
code-intelligence9
material-design6
android6
kubernetes-pods6
backstack6
Programming languages (16)
Github contributions (5)
sourcegraph/sourcegraph-public-snapshot
May 2023 - Aug 2024
Code AI platform with Code Search & Cody
Role in this project:
Full-stack & DevOps Engineer
Full-stack & DevOps EngineerContributions:24 reviews, 55 PRs, 136 pushes in 1 year 3 months
Contributions summary:Shivasurya contributed to both the frontend and backend aspects of the project. They fixed bugs related to the Cody feature, focusing on the integration of search results within the VS Code environment. Additionally, the user implemented security enhancements within the gitserver, addressing arbitrary file read vulnerabilities. Further contributions included updating dependencies and configuring CI/CD pipelines using Semgrep for security scanning.
sourcegraphcode-generationrepo-type-maindeveloper-toolslsif-enabled
shivasurya/instamojo-webhook
Feb 2017 - Sep 2017
Contributions:1 release, 9 commits, 4 PRs in 7 months
verification-libraryjavascriptexpresswebhookexpress-js
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.