Looking for a job

AmriT Poojari

@amritpoojari

Lead Information Security Engineer at Mastercard who shipped a review platform cutting security architecture turnaround from 8 weeks to 12 days.

India

Message

At Mastercard, I own end-to-end product security for a payments platform spanning digital wallets, P2P transfers, tokenization, and BNPL. I designed and shipped the Application Security Review Portal, cutting review turnaround from 8 weeks to 12 days.

I also integrated the portal with Jira through a custom connector and REST API, eliminating 100 hours of manual ticket handoff each month. I lead threat modeling across payment services and finance products, and drive security requirements and automated gates into development workflows.

At Axis Bank, I built the application security program from the ground up, covering 600 applications. I automated 70% of testing by integrating security tools into release pipelines, reducing per-release testing effort from 3 weeks to 5 days.

At Qualys, I designed and launched the company’s first bug bounty program and managed a team of security engineers. I’m OSCP and GIAC GDSA certified, and I’ve also built independent projects including a live Shopify storefront and a fantasy sports platform.

Experience

Work history, roles, and key accomplishments

Current

Lead Information Security Engineer

Current

Mastercard

Jun 2022 - Present (4 years 3 months)

Owns product security for a globally deployed payments application, including digital wallet, P2P, and BNPL. Designed and shipped an internal security review platform that cut review turnaround from 8 weeks to 12 days.

Power Platform Dataverse Microsoft Power Fx Power Automate REST APIs Jira Threat Modeling Security Architecture Review SDLC RBAC Workflow Design

Senior Security Engineer

Mastercard

Jun 2021 - Jun 2022 (1 year)

Built and shipped security features for a global payment wallet, hardening against account takeover and token replay. Remediated 300+ findings from SCA and SAST tools and reduced false positives by 70%.

Black Duck Checkmarx SAST SCA Security Assessments PCI DSS Tokenization Wallet Security

Technical Application Security Manager

Qualys

Jul 2020 - Jun 2021 (11 months)

Led the application penetration testing team covering 8 Qualys products. Designed and launched the company's first bug bounty program end to end.

Penetration Testing Bug Bounty Vulnerability Management Incident Response Team Management

Technical Manager – Application Security

Axis Bank

Apr 2019 - Jun 2020 (1 year 2 months)

Ran security assessments across web applications, APIs, and mobile apps, aligning to PCI-DSS and RBI requirements. Drove remediation of 100+ critical vulnerabilities in production banking applications.

Application Security PCI DSS RBI Vulnerability Management Mobile Security API Security

Deputy Technical Manager – Application Security

Axis Bank

Nov 2016 - Mar 2019 (2 years 4 months)

Built and operationalized the bank's application security program from the ground up, covering 600 applications. Automated 70% of the security testing process and reduced per-release effort from 3 weeks to 5 days.

Acunetix Checkmarx Appknox SAST IAST WAF Red Team Blue Team Automation

Senior Security Engineer

CitiusTech

May 2016 - Nov 2016 (6 months)

Delivered application security testing for a major US healthcare and aviation client across web, mobile, and API surfaces. Performed OS hardening and security tool policy review for embedded medical devices.

Application Security Penetration Testing System Hardening HIPAA FDA Mobile Security

Team Lead & Senior Security Analyst

Paladion Networks

Jan 2014 - May 2016 (2 years 4 months)

Led VAPT delivery for a major BFSI enterprise client, owning scoping, execution oversight, and remediation guidance across 20+ engagements. Ran PCI-DSS audits, APT simulations, and ASV scans.

VAPT PCI DSS Advanced Persistent Threat (APT) Simulation ASV Scans Security Briefings Team Leadership