Open to opportunities

Akshat Bagga

@akshatbagga

Penetration tester and application security consultant delivering offensive assessments and actionable remediation for enterprise systems.

India

Message

What I'm looking for

I’m looking to lead offensive security assessments across web, mobile, APIs, and cloud, deliver executive-ready reports with clear remediation, and continuously improve testing playbooks—while applying strong OWASP/secure SDLC focus to emerging AI/LLM risks.

I’m an application security consultant and penetration tester with 4.5+ years of experience delivering offensive security assessments across enterprise-grade applications and infrastructure. I’ve executed 300+ penetration testing engagements, specializing in web, mobile (Android & iOS), APIs (REST/SOAP/GraphQL/WebSocket), thick clients, network infrastructure, and GenAI/LLM security testing.

I bring deep expertise in OWASP Top 10, OWASP MASVS, SANS Top 25, and MITRE ATT&CK, with a strong focus on secure SDLC and practical exploitability. I produce both technical and executive-level reports with CVSS risk ratings, business impact analysis, and remediation guidance, while mentoring junior team members.

In my current role, I lead testing end-to-end—web/mobile/API, network and AWS cloud security (IAM review, secrets handling, logging/monitoring), and LLM/RAG/agentic workflow assessments. I also support re-testing and remediation validation, collaborating with development, DevOps, and infrastructure teams to embed security across the lifecycle.

Experience

Work history, roles, and key accomplishments

Current

Application Security Consultant

Current

Nusummit Technologies Pvt. Ltd.

Sep 2024 - Present (1 year 9 months)

Led penetration testing across web, mobile (Android/iOS), APIs, thick client, and network infrastructure, covering OWASP Top 10, OWASP MASVS, and SANS Top 25 in enterprise banking environments. Produced technical and executive reports with CVSS risk ratings, drove re-testing/remediation validation, and performed AI LLM security, JWT/API attack testing, and AWS security assessments.

OWASP Top 10 OWASP ASVS Metasploit Mobile Testing (Frida MobSF Apktool)AWS Security LLM Security Testing

Associate Consultant - AppSec

SISA Information Security Ltd.

Feb 2022 - Sep 2024 (2 years 7 months)

Planned and executed 300+ penetration tests across web, mobile (Android/iOS), API, thick client, and network environments, including OWASP Top 10 and OWASP MASVS coverage. Built custom Python scripts for automation, identified multi-stage attack chains (e.g., SSRF-to-metadata), and delivered pentest reports with reproduction steps, risk ratings, and remediation guidance.

OWASP Top 10 OWASP ASVS Burp suite Postman Mobile Reverse Engineering (Jadx Apktool)Frida Dynamic Analysis TLS Crypto Testing