Sushmita Gadad

I’m an Application Security and Penetration Testing professional with 4+ years of hands-on VAPT experience. At Accenture (2018 to 2023), I worked as a Senior Security Analyst testing web applications, mobile apps, APIs and source code across development, QA and production environments for banking, government, automotive, metro rail and airport clients. I focused on manual testing aligned with OWASP Top 10, covering SQL injection, XSS, CSRF, security misconfiguration and API authentication and authorization flaws, using tools such as Burp Suite, HP WebInspect, Fortify, MobSF, Frida, Postman and Kali Linux.

Some of my key achievements include identifying critical vulnerabilities in banking and government applications so they could be fixed before deployment, prioritizing findings using CVSS and business impact, writing detailed reports with evidence and remediation guidance, and re-testing fixes to confirm closure. I also worked closely with developers on root-cause analysis and secure coding, and delivered training and onboarding sessions on OWASP Top 10 and security testing practices.

Since 2023, I’ve been on a career break after relocating to the USA, and I’ve used the time to keep my skills current. I completed a Cybersecurity Project Management certification and McKinsey’s Forward Learning Program, and built knowledge of Generative AI, LLM security and the OWASP Top 10 for LLM Applications. I’m CEH certified and also hold Azure AZ-900, Qualys Vulnerability Management and Cybrary web application penetration testing credentials.

I’m interested in remote Application Security, VAPT, Security Analyst and Security Consulting roles, particularly with teams that value strong developer collaboration and clear risk communication. I’m also open to roles that combine security with project or program management, and I’m keen to grow further in AI and cloud security. I’m returning to India permanently at the end of November 2026 and am available to start full time from December 2026, with flexibility to overlap with US or EU hours.