Looking for a job

Aarya Nandavadekar

@aaryanandavadekar

Message

I lead offensive security engagements across web, cloud, API, mobile, and infrastructure environments.

India

Message

I've delivered 50+ offensive security engagements for 8+ enterprise clients at Kroll, independently owning 28+ engagements from planning and testing through reporting and delivery.

I assess web applications, APIs, cloud environments, mobile applications, and infrastructure, validating critical risks and translating vulnerabilities into actionable remediation strategies.

Previously at the Bombay Stock Exchange, I oversaw VAPT operations for critical financial servers, coordinated internal resources and external vendors, and worked directly with department leaders on security risk and mitigation.

I also mentor new associates through live-project shadowing and bring hands-on experience from CERT-In empanelment engagements, supported by CPSA, CRTP, CEHv12, and Google Cybersecurity certifications.

Experience

Work history, roles, and key accomplishments

Current

Consultant - Offensive Security

Current

Kroll

Apr 2026 - Present (5 months)

Promoted to Consultant in April 2026, taking on increased responsibility for client engagement ownership and delivery. Delivered 50+ offensive security engagements across 8+ enterprise clients, independently owning 28+ engagements end-to-end.

Web Application Penetration Testing (WAPT)Cloud Security Offensive Security Client Communication Stakeholder Management Mentorship

Associate Consultant - Offensive Security

Kroll

Apr 2025 - Mar 2026 (11 months)

Partnered with engagement managers and client stakeholders to define testing scope, objectives, methodologies, and deliverables. Performed offensive security assessments across web applications, APIs, infrastructure, and cloud environments.

Web Application Penetration Testing (WAPT)API Security Infrastructure Security Cloud Security Technical Writer Client Communication

Assistant Manager - Information Security

Bombay Stock Exchange

Sep 2024 - Mar 2025 (6 months)

Performed infrastructure penetration testing across critical financial servers, identifying security weaknesses and assessing their potential business and operational impact. Oversaw VAPT operations, coordinating internal resources and external vendors.

Infrastructure Testing Vulnerability Assessment VAPT Program Management Stakeholder Management Risk Assessment

Cybersecurity Trainee

63 SATS Global CyberTech

Aug 2023 - Aug 2024 (1 year)

Conducted web, mobile, API, and infrastructure security assessments as part of CERT-In empanelment engagements. Assessed 10+ web applications and 5+ Android applications, identifying vulnerabilities including Remote Code Execution and Remote File Inclusion.

Web Application Security Mobile Security API Security Infrastructure Security Vulnerability Assessment Report Writing