Looking for a job

kunal gambhir

@kunalgambhir

Message

Senior Cybersecurity Engineer at Delhivery assessing applications, cloud infrastructure, and third-party risk.

India

Message

At Delhivery, I assess vendors, SaaS platforms, applications, and technology integrations before onboarding and production use. I review application and cloud security, conduct threat modeling, and track findings through remediation.

At Nykaa, I led security initiatives across application and API security, penetration testing, and Secure SDLC programs. I integrated security testing into CI/CD workflows and developed tools, scripts, and automation frameworks to streamline testing.

Earlier, at Deloitte and Kratikal Tech Pvt. Ltd., I conducted application, mobile, network, and enterprise security assessments. My work has also been recognized through bug bounty and security acknowledgements from Blinkit, Apple, Domino's, and NCIIPC.

Experience

Work history, roles, and key accomplishments

Current

Senior Cybersecurity Engineer

Current

Delhivery

Jun 2026 - Present (4 months)

Assess third-party vendors, SaaS platforms, applications, and technology integrations before onboarding and production use. Perform threat modeling and architecture security reviews to identify attack paths and needed controls.

Application Security API Security Threat Modeling Architecture Reviews OWASP Top 10 OWASP API Security Top 10 Vendor Risk Assessment TPRM SaaS Security Cloud Security IAM ISO 27001 PCI DSS

Security Engineer II

Nykaa

Nov 2023 - Jun 2026 (2 years 7 months)

Led security initiatives across application and API security, penetration testing, vulnerability management, and Secure SDLC programs. Integrated security testing into CI/CD workflows and developed automation frameworks.

Application Security API Security Penetration Testing Vulnerability Management Secure SDLC SAST DAST SCA Code Review Cloud Security CI CD Security Generative AI LLM Security Automation Adversarial Assessment Attack Simulation

Assistant Manager - Risk Advisory

Deloitte

May 2021 - Nov 2023 (2 years 6 months)

Conducted grey-box, black-box, and white-box penetration testing of web and mobile applications, source code, networks, and enterprise environments. Managed client engagements from data collection through remediation discussions and closure.

Penetration Testing Web Application Security Mobile Security Network Security Code Review Vulnerability Assessment Banking Security ATM Security Project Management Client Engagement

Cybersecurity Analyst

Kratikal Tech Pvt. Ltd.

Jan 2019 - May 2021 (2 years 4 months)

Performed grey-box and black-box web application penetration testing, including e-commerce assessments. Analyzed vulnerabilities technically and functionally, and documented findings for remediation.

Penetration Testing Web Application Security Grey Box Testing Black Box Testing Vulnerability Analysis Documentation Cyber Security Awareness