Shubham Shah
SVP Of Engineering & Research at Contractor
Sydney, New South Wales, Australia
Summary
🤩
Rockstar🎓
Top SchoolShubham Shah is an engineering and research leader with 12 years of hands-on offensive security and platform engineering experience, currently SVP of Engineering & Research at Searchlight Cyber after co-founding Assetnote. He combines deep vulnerability research—ranked #1 in Australia on HackerOne for multiple years and #27 globally—with product-driven engineering to build scalable attack surface management tooling. Shubham has a track record of discovering zero-day vulnerabilities in major enterprise software and coordinating responsible disclosures to vendors like Google, Microsoft, PayPal and LinkedIn. Technically bilingual across security research and full-stack development, he has contributed to high-profile open resources such as Assetnote’s widely used wordlists and migrated its infrastructure to CDN-backed S3 for reliability at scale. He’s equally comfortable leading distributed engineering teams and rolling up his sleeves for black-box pentests or automating detection workflows. Based in Sydney, he blends entrepreneurial grit with research rigor to turn complex security problems into production-ready solutions.
12 years of coding experience
10 years of employment as a software developer
Offensive Security Certified Professional, Offensive Security Certified Professional at Offensive SecurityFull Stack Web Attack, Full Stack Web Attack at Source InciteWhite Badge Web Application Security, White Badge Web Application Security at PentesterLabUNSW Sydney
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (9)
javascript10
bruteforce10
python9
html9
css9
datatables8
aws-s38
wget8
datatable8
Programming languages (10)
Github contributions (5)
assetnote/wordlists
Nov 2020 - Jun 2021
Automated & Manual Wordlists provided by Assetnote
Role in this project:
Full-stack Developer
Full-stack DeveloperContributions:3 reviews, 103 commits, 1 PR in 7 months
Contributions summary:Shubham primarily contributed to the development and maintenance of the Assetnote Wordlists website. Their work included implementing new features, such as Kiterunner wordlists and technology mappings, and fixing bugs related to data display and download links. They also improved the user interface by adding features like a careers link and social media buttons. Furthermore, the user made enhancements to the data generation process and infrastructure by moving data to an AWS S3 bucket and subsequently migrating to a CDN.
content-discoverypythonwordlistsbruteforce-wordlistmanual
assetnote/commonspeak2
Jul 2018 - Mar 2021
Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists
Contributions:1 release, 37 commits, 2 PRs in 2 years 8 months
content-discoveryleveragesgoogle-bigquerybigquerywordlists
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.