Looking for a job

Juhitha Keerti

@juhithakeerti

Message

Application Security Engineer with 6+ years of experience

India

Message

What I'm looking for

I’m looking to secure Web/API and LLM-enabled applications with risk-based testing, CI/CD security gates, and evidence-driven remediation. I want to collaborate with engineering teams on secure SDLC and reduce exploitable risk through validated findings.

Application Security Engineer with 6+ years of experience in web and REST API security testing, VAPT,

SAST/DAST, risk assessment, and DevSecOps security integration.

• Hands-on expertise in OWASP Top 10 testing, secure SDLC practices, and software supply-chain risk

management through SCA and dependency reviews.

• Experienced in validating scanner findings, reducing false positives, prioritizing vulnerabilities by

business impact, and driving remediation to closure.

• Focused on AI/GenAI application security for LLM-enabled features, including threat modeling and

controls for prompt injection, data leakage, insecure output handling, plug-in/agent risks, RAG access

controls, and abuse-case testing.

• Aligns security reviews with OWASP guidance for LLM applications and NIST AI risk management

practices when applicable.

Experience

Work history, roles, and key accomplishments

Current

Application Security Engineer

Current

Infosys

Jul 2022 - Present (3 years 9 months)

Performed application security assessments (VAPT) for web applications and REST APIs, validating vulnerabilities, analyzing impact, and prioritizing by risk. Managed SAST/DAST activities, reduced false positives with evidence-driven validation, embedded secure SDLC checkpoints, maintained Jenkins-based security gates in CI/CD, and delivered executive-ready penetration test reports; also applied AI

REST API Security SAST SCA Dependency Risk Management (WhiteSource DevSecOps CI CD Security Gates (Jenkins)Prompt Injection & Data Leakage Testing

Application Security Engineer

Capgemini

Feb 2019 - Dec 2021 (2 years 10 months)

Conducted risk assessments, vulnerability assessments, and penetration testing for web applications and REST APIs across multiple client environments. Executed SAST (Fortify) and DAST with manual validation to remove false positives, performed OWASP Top 10 testing with Burp Suite, performed SCA for third-party/open-source risks, carried out infrastructure vulnerability assessments with Tenable/Nes

OWASP Top 10 SAST SCA Dependency Risk Reviews (WhiteSource)False Positive Tuning & Validation