Looking for a job

aadarsh anand

@aadarshanand

Security researcher at Appknox building LLM agents that find and verify Android vulnerabilities on real devices.

At Appknox, I performed 200+ penetration tests across web, Android, iOS, and API targets, finding critical and high-severity vulnerabilities before release. I also reverse engineered Android apps and native libraries, and led remediation calls with client engineering teams.

I’m now building LLM agents that find and verify mobile vulnerabilities on real devices. My xcalibur project combines agent-generated hypotheses with deterministic device checks, and I’ve contributed Android security test cases to OWASP MASTG.

Experience

Work history, roles, and key accomplishments

Current

Security Researcher

Current

Appknox

Nov 2023 - Present (2 years 11 months)

Performed 200+ penetration tests across web, Android, iOS and API targets for enterprise clients in BFSI, fintech and e-commerce, finding critical and high severity vulnerabilities before release. Reverse engineered Android apps and native .so libraries with Frida, jadx and Ghidra, and led remediation calls with client engineering teams on root cause and secure design.

Penetration Testing Web Security Android Security iOS Security API Security Reverse Engineering Frida JAD X Ghidra Secure Code Review OWASP Top 10 MASVS

Current

Independent Security Researcher

Current

HackerOne

Jan 2021 - Present (5 years 9 months)

Earned $20,000+ in bug bounties from Adobe, Razorpay, AT&T, M&T Bank and Ford, thanked by 21 programs, with Hall of Fame recognition from Accenture, the United Nations and Palo Alto Networks.

Bug Bounty Vulnerability Research Web Security Mobile Security Penetration Testing

Security Research Intern

Appknox

Jun 2023 - Nov 2023 (5 months)

Conducted web and Android assessments against OWASP Top 10 and MASVS/MASTG. Reports were adopted into the team’s standard templates. Converted to full time in 5 months.

Web Security Android Security OWASP Top 10 MASVS Penetration Testing