Akash Gupta
@akashgupta29
Penetration tester pursuing offensive security; found a High severity session revocation bypass accepted and patched by its vendor.
IndiaWhat I'm looking for
At Sopra Banking Software, I built an internal AI Copilot assistant backed by SharePoint SOP documentation so the team can query operational procedures in natural language. I also write infrastructure monitoring scripts and support batch operations and production incident response.
In my security research, I found a High severity session revocation bypass in a messaging relay: deleting an account left its issued token usable over HTTP and WebSocket. I demonstrated the impact, traced the defect across three authentication paths, and the vendor accepted, credited, and patched the finding in v3.0.1.
My hands-on testing spans web applications, APIs, Android, and thick clients. On the DVTA .NET client, I patched a disabled admin control, recovered credentials, inspected traffic, and used DLL hijacking to get code execution on login; on Android, I bypassed six pinned implementations and verified interception in Burp.
I also built a containerized Kali appliance that exposes offensive tools to LLM agents over the Model Context Protocol. I’m looking for a full-time offensive security role, and I continue security work outside my current job.
Experience
Work history, roles, and key accomplishments
Built an internal AI Copilot assistant using Microsoft Copilot Studio backed by SharePoint SOP documentation. Developed automation scripts for infrastructure monitoring, batch operations, and production incident response.
Education
Degrees, certifications, and relevant coursework
PortSwigger
Web Security Academy Labs, Web Security
Completed labs on the Web Security Academy covering various web security topics.
JIMS Rohini Sector 5
Bachelor of Computer Applications, Cybersecurity & Network Security
Bachelor of Computer Applications with a focus on Cybersecurity and Network Security, completed in 2025.
HackTheBox
CPTS Track, Cybersecurity
Completed the CPTS Track covering Active Directory attacks, password and credential attacks, lateral movement, pivoting and tunneling, and attacking common services in hands-on labs.
PortSwigger Web Security Academy
Web Security Academy Labs, Web Security
Completed labs on web security topics.
Tech stack
Software and tools used professionally
Availability
Location
IndiaAuthorized to work in
Salary expectations
Social media
Job categories
Interested in hiring Akash?
You can contact Akash and 90k+ other talented remote workers on Himalayas.
Message AkashGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
