Looking for a job

Sudarshan Pawar

@sudarshanpawar

Message

Product Security leader at OpenGov securing GovTech platforms and automating dependency vulnerability detection.

India

Message

At OpenGov, I lead application security initiatives and a team of application security engineers working to secure GovTech platforms. I deployed GitHub Dependabot and Renovate to detect vulnerable dependencies and automate patching pull requests.

I also led the HCM application’s security assessment and certification, from architecture and design review through penetration testing and security sign-off. I’ve embedded automated scanning, policy enforcement, and security gates into CI/CD pipelines, and supported SOC2/GovRamp certification audits.

Previously, at Cerillion Technologies, I implemented software composition analysis with Syft and Grype to generate SBOMs and scan build artifacts and container images. My work across application security, vulnerability remediation, and secure SDLC spans GovTech, cloud platforms, and enterprise applications.

Experience

Work history, roles, and key accomplishments

Manager, App Sec

OpenGov

May 2026 - Sep 2026 (4 months)

Leading a team of application security engineers, providing technical direction and oversight. Deployed GitHub Dependabot and Renovate for automated dependency patching, and drove secure SDLC implementation and DevSecOps adoption.

Dependabot Renovations OWASP Top 10 VAPT DevSecOps CI CD Rapid7 DAST Jira SonarQube SOC2 GovRAMP Nessus

Senior Software Security Specialist

Cerillion Technologies

Jun 2019 - Apr 2026 (6 years 10 months)

Implemented Software Composition Analysis using Syft and Grype to generate SBOMs and scan for vulnerable components. Led secure SDLC implementation, application security assessments, and vendor VAPT coordination aligned with OWASP Top 10.

Syft (SBOM)Grype SBOMs SCA OWASP Top 10 VAPT SonarQube Jira Security Design Reviews ISO 27001 Nessus

Tech Lead – Cyber Risk Security

Wipro

Feb 2019 - May 2019 (3 months)

Orchestrated application security reviews, threat modeling, and patch governance. Delivered executive-level security recommendations and acted as liaison between security and engineering teams.

Application Security Threat Modeling Patch Management Risk Mitigation

Deputy Manager

Deloitte

Oct 2018 - Feb 2019 (4 months)

Worked on application security assessments, test planning, and security design. Involved in component audit, vulnerability assessment, and penetration testing using tools like Kali Linux, OWASP ZAP, Burp Suite, and SQLMap.

Kali Linux OWASP ZAP Burp suite Zenmap Sqlmap XSSER Penetration Testing Vulnerability Assessment

Senior Software Engineer

Jade Global

Nov 2015 - Oct 2018 (2 years 11 months)

Conducted security-focused regression testing and vulnerability validation within agile sprints. Led defect triage sessions with emphasis on security threats and remediation strategies.

Security Testing Regression Testing Vulnerability Validation Agile Defect Triage

QA Engineer

Druva Data Solution

Jan 2014 - Nov 2015 (1 year 10 months)

Worked on inSync backup-restore cloud application. Conducted in-depth security testing focusing on GUI-layer vulnerabilities and input validation, with manual verification using Burp Suite and OWASP methodologies.

Burp suite OWASP Security Testing Input Validation Manual Testing