Skip to content

About

I see the risk, and the code behind it

Samir Alam working on a laptop

Samir Alam

Application Security & Compliance Engineer

Bengaluru, India

I started on the development side. As an intern at Futurescape Technology I built and deployed a full-stack web application with React, Flask and AWS, with a focus on authentication, role-based access control and secure APIs.

In 2023 I joined Shell as a Security & Compliance Analyst. I ran application security risk assessments, worked through SAST, DAST and penetration test reports, and helped development teams fix OWASP Top 10 issues.

Today I work in IDT Assurance at Shell. I assess business-critical and low-code applications, review AI risk assessments against the EU AI Act, and use SQL and Power BI to check that controls actually work.

My aim is simple: findings that developers can act on, and evidence that shows the fix is real.

3+ years
Security assurance and AppSec at Shell
30%
Faster audit closure through automation
CEH v12
Certified Ethical Hacker, EC-Council
OWASP Top 10
Remediated with development teams

What I bring

Three things you get

Eyes on the real risk

I test whether a control works in practice, not only whether a policy says it exists.

A developer's hands

I build with React, Node.js and Python, so I can read the code behind a finding.

Evidence that holds up

SQL and Power BI to show what is fixed, what is not, and how fast it is closing.

How I work

From first review to closed finding

  1. Assess

    Understand the application, its data and where the real risk sits.

  2. Test

    Read SAST, DAST and pen test results, then test the controls behind them.

  3. Fix

    Work with developers to remediate, from OWASP Top 10 issues to access control.

  4. Evidence

    Track findings to closure and produce audit-ready proof with SQL and Power BI.

Certifications and achievements

Proof, not just claims

All achievements

  • Certified Ethical Hacker

    CEH v12

    EC-Council

  • Security & Compliance

    Nanodegree

    Udacity

  • Special Mention Award

    STGI Hackathon, Panchkula

    Award
30%

Reduction in audit closure time, by automating security validation workflows.

  • Recognized for strong stakeholder engagement across engineering and security teams.
  • Identified and remediated critical security control gaps in enterprise applications.
  • Prioritized remediation of high-risk vulnerabilities from SAST, DAST and penetration testing.
  • Designed Power BI dashboards for leadership visibility into vulnerability trends.