I make web traffic tell the truth.

Senior security engineer at Decentro: WAF and detection engineering, API security, AI-augmented defence

Portrait of U Debasish Rao
U Debasish Rao

I'm a senior security engineer at Decentro, where I secure the infrastructure behind financial APIs: zero-trust VPN access with OpenVPN and Google SSO, a re-architected SOC on Wazuh, automated vulnerability and CIS compliance management, and honeypots that catch attackers early.

Before Decentro I spent three years at PhonePe, a fintech platform serving 500M+ users. I shipped an in-house WAF on Pingora and Coraza, cut malicious traffic by 45%, built a 500-rule detection layer on the Elastic Stack, and designed Barbican, an AI platform that cut alert investigation time by about 60%.

Earlier, I spent two years as a vulnerability researcher at Loginsoft, finding 70+ critical vulnerabilities in Cisco, Juniper and McAfee products through Java source review and binary analysis, and I co-founded a small security company that hardened servers for SMBs and trained 200+ people for CEH, Security+ and CCNA.

What I work with

  • WAF and edge: Cloudflare, Akamai, F5 ASM/AFM, Signal Sciences, Pingora, Coraza, ModSecurity, Nginx Ingress, DDoS defence
  • Detection and SIEM: Elastic Stack, OpenSearch, Wazuh, QRadar, Suricata, Sigma, YARA, MITRE ATT&CK, honeypots
  • Access and zero trust: OpenVPN with Google SSO, mTLS, API gateway hardening
  • TLS and protocols: JA3, JA4 and JA4H fingerprinting, mTLS, TCP/IP, BGP
  • AI-augmented security: MCP servers, LLM-assisted triage, sentence-transformer embeddings, FAISS similarity search, RAG
  • Offensive security: VAPT, Burp Suite Pro, OWASP ZAP, Metasploit, Java source review, CVE research
  • Engineering: Python, Go, FastAPI, Django, Terraform, Ansible, OPA policy-as-code, Docker
  • Compliance: NIST, ISO 27001, PCI-DSS, SOC 1/SOC 2, CIS Benchmarks

Certifications

  • CISSP (in progress, target Q3 2026)
  • AWS Certified Security Specialty (in progress, target Q4 2026)
  • EC-Council Certified Ethical Hacker (CEH)
  • ICSI Certified Network & Security Specialist (CNSS)
  • Practical Malware Analysis and Windows Privilege Escalation, TCM Security
  • Cisco Cybersecurity Essentials

Education

B.Tech in Electronics and Communication Engineering, GITA, Bhubaneswar (2016 to 2020)

Career

  1. Lead / Senior Security Engineer (Sole InfoSec Lead), Decentro

    to present

    Sole owner of the Information Security program for a fintech API platform serving banking partners and enterprise clients.

  2. Senior Infosec Engineer, PhonePe

    to

    Protected 500M+ user transactions across PhonePe's distributed fintech platform.

  3. Infosec Engineer, PhonePe

    to

  4. Security Researcher, Loginsoft

    to

    Enterprise vulnerability research for Cisco, Juniper, McAfee and other Tier-1 vendors.

  5. Co-Founder & Security Analyst, Mitigater TechSecure

    to

  6. Professional Trainer, Golars Networks

    to

    Advanced cybersecurity, networking and cloud training in Hyderabad.