Available for consulting · 8am–2pm IST

Sayan Chatterjee

$ whoami →

10+ years securing digital ecosystems — from vulnerability assessments at KPMG to building product security programs at Ciena. I make systems harder to break.

10+ Years Experience

100K+ YouTube Views

15K+ Community Followers

Get In Touch View Articles

SCROLL

Technical Skills

Tech Stack

Offensive Security

Kali LinuxBurp SuiteMetasploit nmapgobusternuclei SQLMapExploit DevOSINT

Defensive Security

SIEMThreat ModellingIncident Response Vulnerability AssessmentAppSecSAST/DAST

DevSecOps & Cloud

GitHub ActionsDockerKubernetes AWS SecurityBashPython CI/CD PipelinesContainer Security

GRC & Compliance

ISO 27001PCI-DSSOWASP Top 10 GDPRRisk ManagementSecurity Frameworks

About

Who I Am

Product Security Manager at Ciena, based in Amsterdam, Netherlands. I architect security tooling, integrate threat detection into CI/CD pipelines, and lead threat modelling across telecom product lines.

Previously at KPMG for three years, I delivered VAPT engagements for banking and healthcare enterprises, drove ISO 27001 and PCI-DSS compliance programmes, and built remediation roadmaps for critical-risk findings.

Outside of work I build security tools, write CTF walkthroughs, and run HackSayan — a YouTube channel and community that makes offensive and defensive security accessible to practitioners at every level.

Penetration Testing Threat Modelling DevSecOps AppSec SAST / DAST CTF OSCP Amsterdam, Netherlands

OSCP

Offensive Security Certified Professional OffSec Verified on Credly

CEH

Certified Ethical Hacker v9 EC-Council · ECC34439058890

CNSS

Certified Network Security Specialist ICSI Verified on Accredible

B.Tech — Computer Science Engineering FIEM, Kolkata University · 2016

Work History

Experience

Jul 2021 — Present Current

Product Security Manager

Ciena

Architects security tooling and integrates SAST/DAST gates into DevOps pipelines
Leads threat modelling and security architecture reviews for telecom products
Drives product security posture across cross-functional engineering teams
Implements automated security scanning in CI/CD workflows

DevSecOpsThreat ModellingAppSecCI/CDPython

Jul 2018 — Jun 2021

Cybersecurity Consultant

KPMG

Conducted VAPT engagements for banking, finance, and healthcare clients
Delivered compliance programmes across ISO 27001 and PCI-DSS frameworks
Authored detailed technical risk reports and remediation roadmaps
Mentored junior analysts and supported pre-sales technical scoping

Penetration TestingComplianceRisk AssessmentVAPT

Oct 2016 — Jul 2018

Programmer Analyst

Cognizant

Evaluated security practices across application portfolios
Maintained information security policies and standards
Performed secure code reviews and SDLC security integration

Secure CodingCode ReviewSecurity Policies

Open Source

GitHub Projects

All repositories

Recon & OSINT

AutoRecon-HS

Automated reconnaissance framework that chains nmap, gobuster, nuclei, and custom modules for rapid target enumeration during pentest engagements.

PythonnmapNucleiOSINT

View on GitHub

DevSecOps

SecPipe

Security-first CI/CD pipeline template with SAST, DAST, secrets scanning, and dependency auditing. Drop-in ready for GitHub Actions and GitLab CI.

ShellGitHub ActionsSASTDAST

View on GitHub

Threat Intel

CVE-Alert-Bot

Real-time CVE monitoring bot that fetches from NVD, filters by CVSS score, and pushes Slack or Telegram alerts within minutes of public disclosure.

PythonNVD APISlackTelegram

View on GitHub

CTF & Learning

CTF-Writeups

Documented solutions for HackTheBox, TryHackMe, and competition CTFs. Step-by-step walkthroughs from enumeration to root for practitioners at every level.

BashHackTheBoxTryHackMeWriteups

View on GitHub

Contribution activity · Active since 2022