Rushikesh Gawali

About Rushikesh Gawali

I am a Senior Application Security Consultant at IBM with over 4.4 years of experience in Application security, Devsecops, vulnerability assessment, and penetration testing, with growing expertise in Generative AI security. I specialize in identifying, exploiting, and mitigating security vulnerabilities across web, mobile, API, and AI-driven applications, ensuring secure and resilient software delivery.In my current role, I perform end-to-end application security assessments, including manual and automated penetration testing, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). I actively contribute to threat modeling, secure architecture reviews, and DevSecOps integration, enabling organizations to adopt a shift-left security approach.Additionally, I work on securing Generative AI applications by identifying risks such as prompt injection, insecure output handling, sensitive data exposure, model misuse, and API vulnerabilities in LLM-based systems. I perform security testing on AI-integrated applications, validate input/output handling, and recommend mitigation strategies aligned with OWASP Top 10 for LLMs and secure AI development practices.I have hands-on experience with tools such as Burp Suite Pro, OWASP ZAP, Metasploit, and SAST/SCA platforms, along with a strong understanding of OWASP Top 10, OWASP ASVS, and secure coding best practices. I collaborate closely with development and DevOps teams to remediate vulnerabilities, implement security controls, and strengthen application security posture.Previously, at Tata Consultancy Services (TCS), I contributed to multiple VAPT engagements focusing on web, mobile, and API security testing. I was also involved in assessing modern applications, including those integrating AI/ML components, identifying risks such as insecure APIs, improper data handling, and injection flaws, and providing actionable remediation guidance.I hold a Bachelor of Engineering from Savitribai Phule Pune University and a Diploma from Sanjivani College of Engineering. I am also a Certified Ethical Hacker (CEH), with a strong passion for continuous learning in advanced penetration testing, cloud security, and AI security.I am committed to building secure, scalable, and intelligent applications by integrating security into every stage of the software development lifecycle.

Experience

1. Senior Application Security Consultant

   IBM

   Jan 2026 — Present

Education

• Savitribai Phule Pune University (SPPU)

  Bachelor of Engineering - BE, Mechanical Engineering

• Sanjivani College of Engineering kopargaon

  Diploma in Engineering , Mechanical Engineering