Open to opportunities

Abhijeet Pathak

@abhijeetpathak

Message

Security consultant specializing in DevSecOps, penetration testing, and GenAI/LLM security.

India

Message

What I'm looking for

I’m looking to lead security assessments and threat modeling, embed SAST/DAST/SCA into CI/CD, and build practical GenAI/LLM security testing that scales with automation and clear developer remediation.

I’m a Security Consultant with 5 years of experience spanning penetration testing, threat modeling, secure code review, and cloud security for banking, telecom, and cloud services clients. I specialize in Active Directory compromise testing and network segmentation review, and I proactively surface security risks before they reach production.

I embed security across the SDLC by integrating SAST, DAST, and SCA tooling into CI/CD pipelines, partner with cloud provider security teams on AWS infrastructure assessments, and perform manual secure code review. I’ve also pioneered GenAI/LLM security testing for chatbots, AI coding agents, Voice AI agents, MCP servers, multi-agent orchestrators, and RAG pipelines—building automation like custom Burp Suite extensions, an SQLi detector, and AI-powered reporting to scale coverage.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Consultant

Current

Kroll

Oct 2023 - Present (2 years 9 months)

Conducts penetration testing across web, mobile, API, and network environments, including Active Directory compromise assessments. Integrates SAST/DAST/SCA and secret scanning into CI/CD pipelines and performs manual secure code reviews and threat modeling, including GenAI/LLM penetration testing.

Penetration Testing Active Directory Security Testing SAST DAST SCA CI CD Security GitHub Actions Gitlab CI Threat Modeling Java Python JavaScript TypeScript C# .NET

Security Consultant

RedHunt Labs

Dec 2021 - Sep 2023 (1 year 9 months)

Identifies high-severity vulnerabilities across web, API, and Android applications and runs continuous attack surface management for large asset inventories. Delivers test cases, reports, and POCs using common security tooling and supports remediation with client coordination.

Vulnerability Assessment LFI Testing Attack Surface Management Burp suite Nessus Nmap Sqlmap Postman Python BASH Go

Associate Security Consultant

SecurityBulls Intelligence

Jun 2021 - Dec 2021 (6 months)

Tests web, API, and Android applications to identify high-severity vulnerabilities using penetration testing tools, and performs DAST and source code reviews. Develops automation tooling to streamline repetitive testing tasks.