Aseem Chopra

Experience

1. Product Security Engineer

   • Vouch.io

   Sep 2022 — Dec 2025 • Remote

   • Owned end-to-end BLE authentication for iOS and watchOS to enable passwordless vehicle access (GATT flows, device registration, public-key exchange, replay protection, and secure background operation).
   • Designed TLS 1.3 session resumption backed by HSM-managed keys for automotive key fobs, improving connection reliability while preserving forward secrecy and hardware-enforced key isolation.
   • Built a cross-platform mobile security framework (iOS/Android) using hardware-backed key storage, integrity verification, jailbreak/root detection, and runtime risk assessment.
   • Owned security architecture across mobile, backend, and firmware for connected-vehicle systems; led design reviews and remediation decisions with engineering and product leadership.
   • Shipped a proximity-based digital key sharing feature enabling secure cross-device key transfer between iPhones using encrypted key-wrapping patterns.
   • Reverse engineered Windows Credential Provider flows to validate passwordless login behavior, identify security gaps, and ensure SAML interoperability with enterprise IdPs.
   • Found and validated BLE stack and firmware vulnerabilities via protocol analysis, packet captures, and custom tooling, partnering with engineering teams to ship mitigations.
   • Built an internal GitHub App & Next.js dashboard to aggregate GitHub Projects milestones and generate a company-wide visual delivery timeline.

2. Junior Security Analyst

   • Vouch.io

   Sep 2021 — 2022 • Remote

   • Contributed to research that led to a US-granted patent in secure automotive communication by reviewing security architecture and protocol flows.
   • Translated low-level firmware–mobile protocol documentation into higher-level architecture diagrams and specifications, improving cross-team alignment and review velocity.
   • Performed STRIDE-based threat modeling for client ECU integrations, identifying trust-boundary gaps and abuse cases and recommending design changes.
   • Executed penetration tests and security assessments across Android/iOS apps, embedded firmware, and backend services, delivering actionable remediation guidance.
   • Contributed to cryptographic protocol design and implementation reviews for mobile and IoT products in production environments.
   • Authored and automated SDK documentation and internal guides, and helped deliver onboarding and security training for new hires.
   • Participated in GDPR and CCPA compliance assessments by mapping PII data flows and driving remediation recommendations.

Profiles

• LinkedIn
• Portfolio
• GitHub
• HackTheBox
• SPOJ (kidalgorist)

Education

• MBA, Marketing and AI

  Indian Institute of Management, Kashipur

  Focus on AI-driven products and security-conscious go-to-market.

• B.E., Information Technology

  Guru Gobind Singh Indraprastha University

  Algorithms, data structures, computer networks, and cybersecurity foundations.

• High School

  The Mother's International School

  Science with Economics