2021-2025
Bachelor of Technology - B.Tech
Computer Science and Engineering
Indian Institute of Technology, Tirupati
- Department Rank 1 in first year
- Branch change to CSE based on academic excellence
8.46CGPA
Hello, I’m
Sunkugari Tejeswara Reddy
Senior Software Engineer at Zscaler
I build secure systems across browser security, cloud infrastructure, and full-stack development.
Get to know me
About Me
I’m a Computer Science graduate from IIT Tirupati, now working on browser security and cloud infrastructure at Zscaler.
Education
2021
Senior Secondary
State Board of Intermediate Education, Telangana
98.4%Score
2019
Secondary
Board of Secondary Education, Andhra Pradesh
10.0CGPA
Research, demos, and workshops
Featured
Nullcon Goa 2026 — Workshop Speaker
Inside the Browser — Exploiting, Detecting & Containing Malicious Extensions in Modern Web Ecosystems. A 2-hour hands-on workshop on browser extension attacks.
NullconRead more
Browser Syncjacking: New Attack Technique
SquareX Discloses 'Browser Syncjacking' - a New Attack Technique that Provides Full Browser and Device Control Putting Millions at Risk.
Browser SecurityRead more
BlackHat MEA 2025 Speaker
Had the opportunity to present SquareX at BlackHat Middle East & Africa, held in Riyadh, Saudi Arabia 🇸🇦
BlackHatRead more
DEF CON 33 Demo Labs
Extension at DEF CON 33 Demo Labs: Copycat is a red team browser extension that simulates 10+ in-browser identity attacks.
DEF CONRead more
My professional journey
Experience
Senior Software Engineer
Zscaler
- Joined Zscaler following their acquisition of SquareX, continuing work on browser security and cloud infrastructure.
- Contributing to enterprise-scale security solutions.
More about this role
- Working on integrating SquareX's browser security technology into Zscaler's product ecosystem.
Tools: Cloud Security, GCP, Kubernetes, Python, JavaScript
Software Engineer
SquareX
- Built browser extension analysis pipeline with static scanning, sandboxing, and risk scoring for malicious extension detection.
More about this role
Tools: Chrome Extensions, GCP, Cloud Run, BigQuery, Redis, Kubernetes, Docker, Python, JavaScript
Software Developer
IIT Tirupati
- Developed Department of Computer Science and Engineering website at IIT Tirupati.
- Ensured responsive design, functionality, and enhanced user experience.
More about this role
- Collaborated with faculty for requirements and content integration.
Tools: Web Development, React, Node.js
Software Development Intern
Auroitech
- Developed 'Dhrishti' mobile app using Flutter for patient care with full DevOps lifecycle.
- Configured iOS deployment using Xcode and published to App Store.
More about this role
- Built REST APIs for patient registration system with efficient data management.
Tools: Flutter, Xcode, iOS, Android, REST API, DevOps
Things I've built
Featured Projects
Showing 4 projects
Browser Extension Analysis
A distributed pipeline that detects malicious browser extensions through static scanning, sandboxing, and multi-signal risk scoring.
My contribution
- Designed distributed analysis pipeline with metadata intelligence, static scanning, and dynamic sandbox execution.
- Integrated Semgrep, RetireJS, and custom AST parsers to detect unsafe APIs and obfuscation patterns.
- Built Kubernetes-based cluster enabling horizontally scalable and fault-tolerant extension analysis.
Tools: Kubernetes, Docker, GCP, Playwright, Python, JavaScript, Semgrep, Static Analysis
Year of Browser Bugs (YOBB)
Browser vulnerability research with proof-of-concept attacks for syncjacking, polymorphic extensions, and browser-native ransomware.
My contribution
- Discovered and developed PoC exploits for browser syncjacking, polymorphic extensions, and native ransomware.
- Researched AI browser agent vulnerabilities revealing expanded attack surfaces through automation.
- Produced technical reports with exploitation methodology and defensive recommendations for vendors.
Tools: Browser Security, Chrome Extensions, AI Security, Vulnerability Research, Python, JavaScript
IdentityAttackSimulator
A Chrome extension that simulates 10 identity attacks for security training, including phishing, cookie theft, and session hijacking.
DEF CON 33 / BlackHat MEA
My contribution
- Developed Chrome extension simulating 10 identity attack scenarios including credential stuffing and session hijacking.
- Designed for red teaming, security training, and demonstrating identity theft risks.
- Selected for presentation at DEF CON 33 and BlackHat Middle East & Africa conferences.
Tools: Chrome Extensions, JavaScript, Security Research, Red Teaming
Dhrishti
A patient care app connecting medical records, appointments, family profiles, and prescription reminders.
My contribution
- Built patient care app with EMR integration for real-time appointment and medical data tracking.
- Implemented family profile management, self-declarations, and automated prescription reminders.
- Published updated version on both App Store and Google Play Store using Flutter.
Tools: Flutter, Xcode, iOS, Android, EMR Integration
Recognition & milestones
Achievements
BlackHat Middle East & Africa
Selected to present Identity Attack Simulator and the Angry Magpie DLP bypass toolkit at BlackHat MEA 2025.
Leadership
Recognized by the Director of IIT Tirupati for leading the 2024–25 placement season and representing 450+ students.
Bronze Medal - Inter IIT TechMeet 12.0
Won third place among the IITs in the CERT-IN cybersecurity challenge at IIT Madras.
Academic Excellence
Department Rank 1 in first year at IIT Tirupati; moved to CSE through academic excellence. Top 1% in JEE Advanced and top 1.7% in JEE Mains.
Positions of Responsibility
Photo 1 / 6
Students' Placement Head
- Students represented
- 450+
- Representatives led
- 30
- Represented the 2025 graduating batch and resolved student queries throughout the placement process.
- Led placement representatives and coordinated communication with students and placement officers.
Photo 1 / 2
CSE Department Representative
- Connected students and faculty to resolve concerns about the curriculum, exams, and academic schedules.
- Represented students in class committee meetings with the Head of Department and CSE faculty.
Let's connect