Shreyas Sriram
Security Engineer, Vulnerability Management at Robinhood
Old Toronto, Ontario, Canada
Summary
👤
Senior🎓
Top SchoolShreyas Sriram is a security engineer with eight years of experience specializing in vulnerability management and scalable security automation, currently shaping vulnerability programs at Robinhood in the San Francisco Bay Area. He combines a strong academic foundation from Johns Hopkins (MS Security Informatics) and hands-on engineering roots from roles in India and the US to bridge research-informed defenses with production-grade tooling. Shreyas contributes to high-impact open-source security tooling—adding detectors and verification logic to truffleHog for detecting leaked credentials—which reflects his focus on practical secret-detection and incident prevention. His background includes internships and engineering roles at Salesforce and Mesh7, giving him broad exposure to cloud and application security across organizations of different sizes. Known for building security “through code,” he pairs automation-first thinking with careful engineering, often solving subtle detection and offset bugs that improve signal fidelity. Based in Old Toronto, he blends global experience with a collaborative, research-driven approach to harden systems at scale.
8 years of coding experience
3 years of employment as a software developer
Computer Science, Computer Science at Padma Seshadri Bala Bhavan Sr. Sec. SchoolJohns Hopkins UniversityBachelor of Engineering - BE Computer Science, Bachelor of Engineering - BE Computer Science at SSN College of Engineering
Github Skills (7)
secret-management10
go10
credentials10
security10
apidoc9
api9
python7
Programming languages (7)
Github contributions (5)
trufflesecurity/trufflehog
May 2022 - Aug 2024
Find, verify, and analyze leaked credentials
Role in this project:
Security Engineer
Security EngineerContributions:2 reviews, 4 PRs, 11 comments in 2 years 4 months
Contributions summary:Shreyas's contributions primarily focused on enhancing the security features of the TruffleHog project. They implemented new detectors for various secrets, including Wiz, Endorlabs, and Robinhood Crypto, by incorporating pattern matching and API verification logic to identify potential leaked credentials. Additionally, the user fixed a bug related to fragment line offsets within the engine of the project.
golangdynamic-analysisplacesecurity-toolssecurity
shreyas-sriram/trufflehog
Oct 2023 - Aug 2024
Find and verify credentials
Contributions:1 PR, 25 pushes, 6 branches in 10 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.