Open to opportunities

Akash Pandey

@akashpandey3

Message

Senior Application Security Engineer driving AppSec programs and large-scale security testing.

India

Message

What I'm looking for

I seek roles where I can lead AppSec programs, perform large-scale application security testing, collaborate with dev teams, and drive measurable risk reduction.

I am a Senior Application Security Engineer with 6+ years building and leading AppSec programs, conducting large-scale DAST, SAST and SCA testing, and managing end-to-end vulnerability workflows. I establish processes, documentation, and governance to reduce application risk and enable secure development.

I have led assessments across web, mobile, API and thick-client applications, executing VAPT for hundreds of applications and administering bug bounty programs to enable continuous testing. I prioritize remediation based on business impact and severity while collaborating closely with development teams to drive fixes and improve secure practices.

My experience spans building AppSec from scratch, performing risk-based testing and compliance assessments for government and enterprise customers, and using industry tools like Burp Suite, OWASP ZAP, Snyk and Metasploit. I am focused on pragmatic security that balances business needs with effective risk reduction.

Experience

Work history, roles, and key accomplishments

Current

Security Delivery Specialist

Current

Accenture Solutions Pvt Ltd.

Mar 2022 - Present (3 years 10 months)

Established the Application Security program and governance, conducted quarterly DAST/SAST/SCA scans for 180+ applications, and managed end-to-end vulnerability remediation and bug bounty operations.

Application Security DAST SAST SCA Vulnerability Management Bug Bounty OWASP Security Governance

InfoSec Consultant

AKS IT Services

Jan 2021 - Mar 2022 (1 year 2 months)

Executed web, mobile, and thick-client VAPT for 50+ applications using black-box and white-box methodologies and ensured compliance with organizational security standards and OWASP guidelines.

Vulnerability Assessment Application Security Mobile Security OWASP Reporting

Information Security Associate

CR Group

Sep 2020 - Jan 2021 (4 months)

Led application reconnaissance and delivered risk-based web, mobile, and API VAPT engagements aligned to business impact and application risk.

API Security Web VAPT Mobile VAPT

Information Security Auditor

AAA Technologies Public Limited

Jun 2019 - Sep 2020 (1 year 3 months)

Performed web and mobile VAPT for 40+ applications using manual and automated tools, validated and documented vulnerabilities, and supported security posture management across government offices.