Shubham Agrawal
About Shubham Agrawal
Shubham Agrawal is a Security Engineer with extensive experience in cybersecurity, currently working at FINRA since 2019. He has a Master's degree in Cybersecurity from the University of Maryland and has previously held positions as a Teaching Assistant, Grader, and Graduate Assistant at the same institution.
Current Role at FINRA
Shubham Agrawal has been employed as a Security Engineer at FINRA since 2019. In this role, he leads red team engagement activities, focusing on exploiting weaker access control mechanisms in AWS and escalating privileges to the highest role. He has developed an exploitation framework that incorporates in-house enumeration and exploitation scripts, contributing to the enhancement of FINRA's security posture.
Previous Experience at University of Maryland
Shubham Agrawal has held multiple positions at the University of Maryland. He served as a Graduate Assistant from 2018 to 2019, a Teaching Assistant for four months in 2018, and a Grader for two months in the same year. His responsibilities included supporting academic activities and contributing to the educational environment in College Park, MD.
Technical Skills and Tools
Agrawal reports critical and high-risk issues in over 70 applications annually through manual assessments and the use of professional-level security tools such as CheckMarx, Netsparker, and Contrast. He also strengthens AWS cloud infrastructure by ensuring compliance with Cloud Security Hardening Guidelines. Additionally, he has developed custom automated scripts using Python and Selenium to address functionality gaps in a threat modeling product.
Educational Background
Shubham Agrawal obtained a Master's degree in Cybersecurity from the University of Maryland, studying from 2017 to 2019. Prior to that, he earned a Bachelor of Engineering (B.E.) in Computer Science from Rajiv Gandhi Prodyogiki Vishwavidyalaya, where he studied from 2012 to 2016. His foundational education was completed at The Emerald Heights International School, where he studied from 2001 to 2012.
Participation in Security Competitions
Agrawal actively participates in Capture The Flag competitions to enhance his computer security skills. These competitions provide practical experience in identifying vulnerabilities and exploiting security weaknesses, further developing his expertise in the field of cybersecurity.