Santhoshini Ganta
@santhoshiniganta
I uncover and remediate critical product vulnerabilities through penetration testing, automation, and security research.
IndiaWhat I'm looking for
At Gainsight, I lead product security initiatives across multiple product lines, conducting security architecture reviews, threat modeling, web/API/thick-client penetration testing, code reviews, and SAST/DAST analysis. I also serve as primary security triage specialist for Gainsight on Bugcrowd and HackerOne.
I've discovered three CVEs across phpMyFAQ, Chamilo LMS, and Dolibarr ERP, including two high-severity findings, with an additional high-severity broken-access-control issue pending CVE assignment. My research has been recognized by 30+ companies, and I've identified and remediated 100+ critical vulnerabilities across web applications, APIs, and thick clients.
I build security automation that reduces manual effort: CodeQL pipelines using a three-model AI ensemble, custom Burp Suite extensions, automated test suites, and proprietary AI models for continuous vulnerability detection. I've also mentored junior engineers in VAPT methodologies and stay active in CTF competitions and vulnerability research.
Experience
Work history, roles, and key accomplishments
Leading product security initiatives and security architecture reviews across multiple product lines. Conducting application security assessments, web/API/thick-client penetration testing, and threat modeling.
Associate Security Engineer
Castellum Labs
Jul 2023 - Mar 2025 (1 year 8 months)
Conducted comprehensive security assessments for web apps, mobile apps, thick clients, and REST/GraphQL APIs. Performed secure code reviews and implemented threat modeling (STRIDE) to identify and prioritize security risks.
Web Application Penetration Tester Intern
Cyber Sapiens
Jan 2023 - Jun 2023 (5 months)
Conducted security assessments and OWASP Top 10 vulnerability testing on diverse web applications. Documented vulnerabilities with detailed technical analysis and remediation recommendations.
Freelancer / Cybersecurity Coordinator
GUVI Geek Networks, IITM Research Park
Jan 2021 - Jan 2022 (1 year)
Performed vulnerability assessments and penetration testing on multiple client projects. Managed VAPT teams and contributed to secure coding initiatives.
Education
Degrees, certifications, and relevant coursework
Tilak Maharashtra Vidyapeeth University
Bachelor of Computer Applications, Cloud Computing & Cyber Security
Pursued a Bachelor of Computer Applications with a focus on Cloud Computing and Cyber Security.
International College of Security Duties
Diploma, Cyber Security
Completed a Diploma in Cyber Security.
Availability
Location
IndiaAuthorized to work in
Job categories
Skills
Interested in hiring Santhoshini?
You can contact Santhoshini and 90k+ other talented remote workers on Himalayas.
Message SanthoshiniGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
