Edge security · CrowdSec↗
Cloudflare Worker remediation
Built an edge remediation component that stores threat indicators in Workers KV and blocks or challenges traffic at the reverse proxy. Tested with more than 150,000 malicious IPs.
Software engineer · CTOFriendly
I build software for security and cloud systems.
I’m Shivam, a remote software engineer focused on security integrations, threat intelligence, and cloud infrastructure. At CTOFriendly, I turn difficult product and operations problems into tools teams can run and trust.
Shivam Bhaskar SandbhorIndependent software engineer
01 / About
Practical engineering, from API to production.
I work across backend services, developer tooling, and cloud platforms. My projects include integrations for security products, open-source threat intelligence tools, and monitoring systems for connected devices. I provide remote software engineering services to CTOFriendly Ltd and work with product teams around the world.
SecurityThreat intelligence, detection, and remediation
IntegrationsAPIs, SIEMs, and open-source platforms
CloudEdge software and reliable infrastructure
ObservabilityMonitoring for platforms and IoT devices
02 / Selected work
Engineering work I’ve delivered at CTOFriendly.
These public case studies describe projects I completed for CTOFriendly clients. Each link opens the original project write-up.
Threat intelligence · CrowdSec↗
MISP feed generator
Created a configurable Python service that polls CrowdSec data and publishes feeds for MISP, packaged for straightforward deployment with Docker.
SIEM integration · CrowdSec↗
QRadar threat intelligence app
Built an analyst workflow to query CrowdSec intelligence from IBM QRadar. The app passed IBM’s security and QA review and was listed in X-Force Exchange.
Open source · CrowdSec↗
MSTICPy threat intelligence provider
Added a CrowdSec provider to Microsoft’s MSTICPy threat-hunting library, with tests. The contribution was merged upstream.
Detection engineering · Supabase↗
CrowdSec parsers for Supabase
Built log parsers and detection scenarios for self-hosted Supabase, covering PostgreSQL, PgBouncer, and Kong logs.
IoT observability · Mentemedical↗
Monitoring for an IoT biotech platform
Implemented Prometheus and Grafana monitoring for a K3s platform and RFID readers, with Terraform to reproduce the setup across environments.
03 / Contact
Have a thoughtful engineering problem?
I’m open to conversations about security integrations, cloud engineering, and developer tooling.