Kaushal Shah

Cloud Exchange is a security analytics and response platform that can exchange network events and alerts between security products and third-party SIEM, ITSM tools, and threat sources available on the cloud.

Developed three independent modules from scratch that support the following use cases:
• Log Exporter forwards network logs to SIEMs like Splunk and Rapid7 to extract analytics.
• Ticket Orchestrator creates notifications and tickets on ITSM and collaboration tools like Jira, ServiceNow, and Slack based on business rules.
• Threat Intel exchanger shares threat information between threat sources and periodically enriches the platform's threat database with the latest information.

I also developed a plugin-based architecture that efficiently exchanges data via multi-threading for all modules. I also adhered to OOP and SOLID principles to significantly reduce code maintenance and make adding new modules and plugins easier. Also developed multiple plugins for each module.

Used FastAPI for creating REST API endpoints, OAuth2.0 for user authentication, Celery to schedule periodic tasks using multiprocessing, MongoDB to persist the threat details, Docker for easy deployment, and PyTest for unit tests.

Developed a CLI-based REST API mocking tool that allows users to mock any endpoint with preferred response body, response headers, status code, HTTP method, and response delay.

Used FastAPI to create REST endpoints and MongoDB for persistence. Manual testers mainly used this to test the application's behavior in various organizational scenarios.

Developed a Go-based SaaS platform for mineral management that provides complete visibility into mineral owners' portfolios and ensures royalty payments for the assets they own. This cuts the manual management of mineral rights by 70% and provides real-time visibility.

Developed the following microservices from scratch:
• User service for user authentication and management.
• File service to facilitate file uploads and downloads.
• Workflows service for implementing asynchronous workflows for parsing and structuring user input files.

Used gRPC to communicate between microservices, PostgreSQL for persistence, OAuth2.0 for user authentication, AWS S3 for object storage, RabbitMQ for asynchronous processing, and Docker for deployment.