Pooya Mehregan

About Pooya Mehregan

As an Application Security Engineer at Amazon Web Services (AWS), I bring over a decade of experience in application security and technical program management. My expertise spans conducting comprehensive security reviews, performing threat modeling, and collaborating with cross-functional teams to enhance security posture and streamline deployment processes. Leveraging my PhD in Computer Science with a specialization in Information Security and Privacy, I focus on identifying vulnerabilities and implementing compliance-driven security measures to support organizational resilience. Previously, I contributed to compliance management and audit programs, including SOX and PCI DSS, at Shopify. My work involved translating audit requirements into actionable security controls and collaborating with stakeholders to ensure seamless project execution. Committed to excellence, I am passionate about research, risk mitigation, and fostering innovation within security landscapes, enabling the development of secure, adaptive environments that align with business objectives.

Experience

1. Application Security Engineer

   Amazon Web Services (AWS)

   Feb 2025 — Present · Arlington, VA, US

   Conducted comprehensive application security reviews, identifying vulnerabilities and ensuring compliance with security standards. • Performed threat modeling to assess risks associated with architecture and data flow, enhancing overall security posture. • Collaborated with service teams to address findings, effectively unblocking service releases and improving deployment efficiency.

Education

• Kharazmi University

  Bachelor’s Degree, Computer Software Engineering

• University of Calgary

  PhD, Computer Science

• Shiraz University

  Master of Science (M.Sc.), IT Engineering (E-Commerce)

Skills

• Mathematical Modeling
• Object Oriented Design
• Sqlmap
• Virtualbox
• Web Application Security
• Information Se
• Bash
• Microsoft Technologies
• Eclipse
• Internet Protocol Suite (Tcp/Ip)
• Software Design
• Simulations
• Network Security
• Nmap
• Privacy Protection
• Programming
• Java
• Software Development
• Python
• Latex
• Formal Methods
• Visual Studio
• Penetration Testing
• Encryption
• Computer Science
• Security
• Sat
• Html
• Design Patterns
• Information Security
• Sql Azure
• Algorithms
• Subversion
• Wireshark
• Mysql
• Object-Oriented Programming (Oop)
• Functional Programming
• Sql
• Linux
• Uml