Manish Bhattacharya
Staff Security Engineer with 9+ years building security programs for FinTech and crypto startups. First security hire at multiple startups and an 18x Google Vulnerability Research Grant recipient.
Previously: SynapseFi, XBTO Group, Unstoppable Domains, and others. Helped 100+ YC companies uncover security vulnerabilities.
Work
Building security programs from zero to SOC 2 certified.
0-to-1 Security Programs
A repeatable first-security-hire playbook covering policies, tooling, SOC 2, and bug bounty setup.
Application Security
Web apps, APIs, iOS applications. Focused on FinTech and crypto, where I understand the business logic.
AI Security Workflows
AI-assisted code review, threat modeling, and security triage that surface risks faster, with expert judgment validating every finding.
SOC 2 Type II
Led an end-to-end SOC 2 certification and can guide teams through the audit process.
AWS & Infrastructure
IAM policies, GuardDuty, CloudTrail, Datadog, Cloudflare. Securing cloud-native architectures.
Security Research
Recognized by the companies that take security seriously.
Hall of Fame
RuhrSec Conference, Germany
Security research presented by Google's security team at the RuhrSec conference.
Watch presentation →What People Say
"Manish was one of the pivotal members in the early days of the Synapse team and a highly skilled web security specialist. He receives my highest recommendation. I am very impressed with his work ethic and his passion for security engineering."
"He quickly came up with a detailed test plan and finished the audit in a couple of weeks without much input from our side. It greatly helped us in improving our security standards. I would really recommend Manish."
"Manish is an all-round good guy. He is a skilled web security researcher, but I get a sense that he would be great at pretty much anything he puts his mind to. Any company would be lucky to get him onboard."
Beyond Security
Building products, writing, and sharing ideas.
TEDx Speaker
Spoke about personal finance and building financial awareness for everyone.
Watch talk →Published Author
Wrote a practical guide on using stock screeners for value investing.
View on Amazon →Hackathon Wins
PayPal PyUSD (Winner), Helius Security Track, Drip.haus (2nd), Solana AI, Base Onchain Summer
Mac & iOS Apps
Built and shipped Mac and iOS apps used by hundreds of users.
Contact
Open to full-time Staff/Principal Security Engineer roles (remote) and select consulting engagements.
Email me