Looking for a job

Rituraj Vishwakarma

@riturajvishwakarma

Message

Lead application security professional specializing in financial services risk reduction.

India

Message

What I'm looking for

I seek roles where I can lead application security, embed DevSecOps practices, improve cloud and Application/API posture, work with cross-functional teams, and drive compliance in regulated environments.

I lead application security initiatives with strong hands-on experience in VAPT, secure SDLC, product security, cloud assessments, and regulatory compliance for financial services.

At Axis Securities I oversee the Application Security Lifecycle, vulnerability management, regulatory audit readiness, and incident response, ensuring platforms comply with SEBI, RBI and ISO/IEC 27001 standards.

Previously, I consulted at IBM and Varutra Consulting performing threat modeling, source-code review, SAST/DAST, automated testing, and security training across telecom, government, banking, fintech, and other sectors.

I have practical experience with RASP, Application/Infrastructure/API security posture tools, integrating security into CI/CD (SCA, SAST, DAST, secret scanning), and have a track record in bug bounty programs, publishing research, and mentoring security teams.

Experience

Work history, roles, and key accomplishments

Current

Lead Application Security

Current

Axis Securities

Sep 2024 - Present (1 year 1 month)

Lead the Application Security domain, managing the end-to-end lifecycle with vulnerability management and penetration testing to ensure SEBI and financial compliance. Reduce risk across web, mobile, desktop, and cloud by integrating security in SDLC and managing DevSecOps. Oversee change management with FRS/BRS, conduct threat modeling, define test cases in product security.

Security Consultant

IBM

Oct 2022 - Aug 2024 (1 year 10 months)

Conducted security assessments, threat modeling, and secure architecture reviews for client applications; coordinated remediation, mentored hires, and delivered secure SDLC guidance across telecom, government, and banking clients.

Threat Modeling SAST DAST Security Architecture Vulnerability Assessment Code Review SDLC

Security Consultant

Varutra Consulting

Oct 2019 - Oct 2022 (3 years)

Performed extensive security assessments (web, mobile, API, network), automated testing workflows, and delivered detailed reports that prevented large-scale data breaches across financial, government, and enterprise clients.

API Security Automation (Nuclei Httpx)