Open to opportunities

Lakshay User

@lakshayuser4

Message

I secure high-traffic platforms through VAPT, DevSecOps, and bug bounty programs.

India

Message

What I'm looking for

I'm looking to lead and strengthen application, cloud, and product security programs, combining VAPT, DevSecOps, bug bounty operations, threat modeling, and risk management to reduce real-world security exposure.

At PRISM (formerly OYO Rooms), I secure high-traffic booking platforms and payment microservices through end-to-end web, mobile, and RESTful API penetration testing. I've remediated 100+ critical security flaws and manage global bug bounty operations on HackerOne.

I integrate SAST, DAST, and secret scanning into CI/CD pipelines, conduct vendor security reviews, and deliver secure-coding training focused on OWASP Top 10 and API security. I also tune Akamai WAF rules to block Layer 7 DDoS attacks and reduced botnet traffic by 40% without false positives.

Previously, I led enterprise penetration testing at Deloitte and managed global vulnerability programs at KPMG using Qualys, Kenna Security, and ServiceNow. My work spans VAPT, threat modeling, cloud security, TPRM, and risk reporting aligned with NIST and ISO 27001.

Experience

Work history, roles, and key accomplishments

Current

Assistant Manager Cybersecurity

Current

Prism (Formerly OYO Rooms)

Aug 2022 - Present (4 years 1 month)

Executed end-to-end web, mobile, and API penetration testing across high-traffic booking platforms and payment microservices. Managed global bug bounty operations and integrated automated security tools into CI/CD pipelines.