Resume

Varun Nikhil G. Chopra

Professional Summary

Senior Software Engineer & Security Engineer with 15 years of experience delivering 10+ production grade applications for global brands (HBO Max, Ellen Digital). Specialist in Secrets Management, Detection & Response (DART), and Agentic AI Orchestration. Expert at bridging the gap between research and high scale production; led the organization wide deployment of TruffleHog at Iterable and architected privacy compliant systems for over 80M users at Warner Bros. Discovery. Proven "engineering backbone" capable of turning theoretical security concepts into scalable, functional tools. Leverages AI to design and ship practical solutions that solve real-world, production-scale problems.

Technical Skills

AI & Agentic Systems

LangGraph
LLM Tool Use
Prompt Engineering
OpenAI API

Security & Secrets

TruffleHog (Enterprise Deployment)
Secret Scanning & Remediation
Detection Engineering (Panther)
Incident Response
AppSec
Vulnerability Management

Data & Cloud

AWS (Lambda, S3, DynamoDB, EventBridge)
Docker
GitHub Actions CI/CD

Languages

Python
Node.js
Java
SQL
Swift
PHP

Selected Projects

Autonomous Security Research Agent & Scalable Data Pipeline

LangGraph AWS Lambda DynamoDB Python Streamlit

Agentic Orchestration: Architected a stateful, multi-step research agent using LangGraph to autonomously triage vulnerability data and identify high priority risks.
AWS Data Plumbing: Built a scalable ingestion pipeline using DynamoDB and Lambda. Solved the "1MB Scan Barrier" by implementing recursive pagination logic and used Attribute Filtering (Projection Expressions) to reduce LLM token overhead by 60%.
Cost Governance: Integrated AWS Budget Actions as a hard "Kill Switch," programmatically applying AWSDenyAll policies to agent credentials to prevent runaway AI costs.
Research Interface: Developed a Streamlit dashboard to visualize agent reasoning traces and "reasoning loops," enabling faster human-in-the-loop verification.

View Research Paper

Professional Experience

Security Engineer (DART)

Iterable

2023-2026

Secrets Ownership: Led the organization-wide rollout of TruffleHog across Slack, Jira, and GitHub; personally managed the remediation of over 60 high-risk sensitive keys.
Engineering Support for Research: Translated detection research into production-grade security features by architecting secret leakage prevention into GitHub Actions CI/CD workflows.
High Signal Detection: Authored custom Python based detections in Panther (SIEM), focusing on high fidelity alerts for repository manipulation and log source tampering.
Ownership: Owned end-to-end security automation projects, ensuring robust and dependable infrastructure for the incident response team.

Senior Web Application Engineer (Trust & Safety)

Warner Bros. Discovery

2021-2023

Production Data Engineering: Architected a "Consent Data As A Service" (CDAAS) backend (Node.js/Java) to manage privacy data for 80M+ users, ensuring high availability and legal compliance (GDPR/CPRA).
Observability Pipeline: Built and optimized logging/monitoring pipelines using OpenSearch and Grafana to track high volume streaming data for the HBO Max platform.
Rapid Prototyping: Iterated quickly on internal compliance tools to meet shifting regulatory requirements without compromising system stability.

Fullstack Engineer

WarnerMedia (Warner Bros. Technology)

2018-2021

Portfolio Delivery: Architected and delivered full stack features across a diverse portfolio of high traffic applications, including secure DRM streaming for the Ellentube app and automated logistics for BeKindBox.
Compliance Integration: Implemented OneTrust across global web properties to maintain strict privacy compliance for millions of users.
Data Intelligence: Conducted cross platform data analysis (Stripe, MongoDB) to resolve critical infrastructure bugs for high traffic web applications.

iOS Engineer

Warner Bros. Worldwide TV Marketing

2012-2018

Application Security: Implemented DRM playback and secure asset management for the "Screeners" app used for sensitive pre-release content.
Identity Management: Integrated Okta secure identity management into the internal "Brainiac" CMS project.
Cloud Migration: Migrated legacy marketing stacks to AWS, improving overall security posture and scalability.