Open to opportunities

Payal Bisht

@payalbisht

Message

Application Security professional specializing in AppSec and DevSecOps.

India

Message

What I'm looking for

I seek roles embedding AppSec into SDLC/CI-CD where I can lead assessments, enable DevSecOps, mentor teams, and reduce production vulnerabilities while working with collaborative, security-focused engineering cultures.

I am an Application Security professional with 6.7 years of experience securing web, API, and mobile applications across enterprise and client environments. I specialize in secure SDLC, SAST/DAST/SCA, manual code review, threat modeling, and penetration testing.

I have led application security assessments, integrated security tooling into CI/CD pipelines, and collaborated with development teams to remediate vulnerabilities, reducing production issues by 40–60% and delivering assessments for 50+ applications across fintech, healthcare, and e-commerce.

My approach blends hands-on technical testing, secure architecture reviews, and client-facing consulting — from threat modeling workshops to executive reporting — to embed security into development lifecycles and improve remediation turnaround time.

Experience

Work history, roles, and key accomplishments

Current

Security Analyst

Current

Accenture Solutions Pvt. Ltd.

Jun 2021 - Present (4 years 8 months)

Led application security assessments and penetration testing for web and API applications, integrated SAST/DAST/SCA into CI/CD pipelines to reduce production vulnerabilities, and delivered executive security reports and remediation guidance.

Application Security SAST DAST SCA Threat Modeling CI CD Burp suite Checkmarx Jenkins

Security Associate

Accenture Solutions Pvt. Ltd.

Apr 2019 - May 2021 (2 years 1 month)

Performed web and API security testing and implemented DevSecOps controls in Jenkins and GitLab pipelines, collaborated with developers to remediate auth and business-logic vulnerabilities, and supported AppSec compliance efforts.