Sajal Saraswat
Application / Product Security | OSCP | OWASP Top 10 + API Top 10 | SAST/DAST/SCA | GenAI/LLM Security |DevSecOps (CI/CD) | API Security
- Role
- Cyber Security Consultant at Progist
- Location
- Mathura, UP, IN
- LinkedIn followers
- 500 followers
About Sajal Saraswat
OSCP-certified Application / Product Security consultant (~6 years) across web, API, and mobile security.Currently aligned to ICICI Bank’s application security program (via Progist): VAPT, secure SDLC checkpoints, remediation coordination with product squads, and fix validation. I focus on exploitability validation and developer-ready evidence (repro steps, requests/responses, risk context) to accelerate fix closures and re-tests.Core areas:AppSec/ProductSec: OWASP Top 10, OWASP API Top 10, secure SDLC, threat modeling (STRIDE), secure code reviewAPI security: authn/authz patterns (IDOR/BOLA/BFLA), OAuth2/OIDC/JWT, session managementDevSecOps: SAST/DAST/SCA triage & tuning, CI/CD security gates, secrets + container scanningTools: Burp Suite, OWASP ZAP, Semgrep, Trivy, Gitleaks, Nmap, Wireshark (Nessus/OpenVAS as applicable)Red Team mindset: attack-path validation and exploit-chain thinking (authorized scopes)Projects: SecureShip-CI (DevSecOps pipeline), PromptProbe (LLM prompt injection harness), FridaTrace-MASTG (runtime instrumentation toolkit).Open to: Application Security Engineer / Product Security / DevSecOps Security / API Security roles (NCR, Bengaluru, Remote).
Experience
Cyber Security Consultant
Jul 2024 — Present
ICICI AppSec program: web/API/mobile VAPT; exploitability validation + remediation coordination with squads; fix verification and closure tracking.Authn/authz testing (IDOR/BOLA/BFLA patterns), session handling review, API abuse scenarios; OWASP Top 10 / OWASP API Top 10 mapping.Red Team mindset: attack-path validation and exploit-chain thinking to prioritize real-world impact.
Education
Indira Gandhi National Open University
Bachelor's in Computer Application
Indira Gandhi National Open University
Master of Computer Applications
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.