Abhijeth Dugginapeddi — CEO

As a cybersecurity leader with over 15 years of global experience across Australia, India, and the U.S., I've had the privilege of building and scaling security programs from the ground up—most recently at BigCommerce, where I led the Product and Cloud Security team for over five years. My journey has been shaped by a passion for offensive and defensive security, and a deep belief in building strong security cultures through mentorship, clear communication, and hands-on leadership. I've spoken at 100+ conferences including Black Hat and DEF CON, contributed to research that has identified vulnerabilities in companies like Google and Meta, and advised startups like Strobes on security strategy. At the University of New South Wales, I serve as a Course Advisor, helping shape the next generation of security talent. What sets me apart is a unique blend of technical depth, operational execution, and a strong sense of empathy—something I believe is essential in leadership. I'm energised by building high-performing teams, solving hard problems, and challenging the status quo. I’ll admit—I sometimes overcommit because I care deeply about outcomes. And in the past, I’ve had to consciously shift from “doing” to “delegating” as I moved into more strategic leadership roles. But I’m constantly learning and evolving, driven by a desire to lead with purpose and clarity. If you're working on something interesting in cybersecurity, AI, or looking for mentorship, I’d love to connect. I asked my fav AI tool "Write me a Linkedin Description highlighting some of my achievements but be humble".

Stackforce AI infers this person is a Cybersecurity expert with extensive experience in Application Security and Vulnerability Management.

Location: San Francisco, California, United States

Experience: 16 yrs 7 mos

Skills

Offensive Security
Vulnerability Management
Application Security
Cloud Security
Security Awareness
Education
Security Training
Vulnerability Assessment
Information Security
Cybersecurity Consulting
Penetration Testing
Security Consulting
Cybersecurity Training
Network Security
Corporate Training

Career Highlights

Over 15 years of global cybersecurity experience.
Led security initiatives at BigCommerce, reducing vulnerabilities significantly.
Mentored future security talent at UNSW.

Work Experience

Palo Alto Networks

Director, Offensive Security & PSIRT (1 yr 1 mo)

BigCommerce

Head of Product and Cloud Security (5 yrs 7 mos)

UNSW

Adjunct Lecturer (6 yrs)

Commonwealth Bank

Principal Application Security (3 yrs 8 mos)

Adobe

Security Engineer (1 yr 3 mos)

Tata Consultancy Services

Security Consultant (2 yrs)

SourceNXT

Co Founder and Advisory (3 yrs 5 mos)

Kyrion Digital Securities

Intern: Corporate Trainer (2 mos)

Freelance

Trainer and Security Consultant (2 yrs 1 mo)

Education

Bachelor of Technology (B.Tech.) at GITAM Deemed University

Abhijeth Dugginapeddi

CEO

San Francisco, California, United States16 yrs 7 mos experience

Highly Stable

Key Highlights

Over 15 years of global cybersecurity experience.
Led security initiatives at BigCommerce, reducing vulnerabilities significantly.
Mentored future security talent at UNSW.

Stackforce AI infers this person is a Cybersecurity expert with extensive experience in Application Security and Vulnerability Management.

Contact

Skills

Core Skills

Offensive SecurityVulnerability ManagementApplication SecurityCloud SecuritySecurity AwarenessEducationSecurity TrainingVulnerability AssessmentInformation SecurityCybersecurity ConsultingPenetration TestingSecurity ConsultingCybersecurity TrainingNetwork SecurityCorporate Training

Other Skills

AntivirusBug Bounty ProgramCCEHCISACISSPComputer ForensicsComputer SecurityCyber Security AwarenessDASTData SecurityDesign reviewEncryptionFirewall AdministrationFirewalls

About

Experience

Palo alto networks

Director, Offensive Security & PSIRT

Feb 2025 – Present · 1 yr 1 mo · Santa Clara, California, United States · Hybrid

Been keeping busy (in a good way). Focus areas: Red Team, Pen Test, PSIRT, and vuln remediation. It’s been fun strategising so far — a solid mix of hacking, helping, and creating tickets.

Red TeamPen TestPSIRTvuln remediationOffensive SecurityVulnerability Management

Bigcommerce

Head of Product and Cloud Security

Jul 2019 – Feb 2025 · 5 yrs 7 mos · San Francisco Bay Area

Led the development of a Application and Product Security function, focusing on recruitment, mentorship, and cultivating a strong security culture, significantly reducing vulnerabilities across production environments.
Secured a large number of merchant e-commerce websites, managing integrations with numerous payment providers and thousands of marketplace themes in sandboxed environments.
Led initiatives like the Bug Bounty Program, Security Champions, and automation for SAST, DAST, and SCA, collaborating with internal and external developers.

Application SecurityProduct SecurityvulnerabilitiesBug Bounty ProgramSecurity ChampionsSAST+3

Unsw

Adjunct Lecturer

Mar 2017 – Mar 2023 · 6 yrs · Sydney, Australia

Founder Author of the courses COMP 6443 and COMP 6843, aimed at teaching advanced web application security skills. These were the first courses to offer graduate and postgraduates practical training in penetration testing and application security. As an adjunct professor, I was responsible for creating content, teaching, grading, and tutoring students

web application securitypenetration testingcontent creationgradingtutoringEducation+1

Commonwealth bank

Principal Application Security

Oct 2015 – Jun 2019 · 3 yrs 8 mos · Sydney, Australia

Implemented several initiatives, including the Security Champion Program, Security Development Training, and Security Automation using Runtime Application Self-Protection (RAST).
Built practices to bridge various cyber security teams like Risk, Product Security and Incident response.
Executed multiple security reviews, successfully meeting stringent banking requirements.
Worked on new initiatives with SAST, DAST, IAST, SCA, Secrets and whole security in CI/Cd pipeline
Managed developer training, security awareness, and outreach initiatives for the bank. Developed tools for application security, such as fuzzers and automated scanners.
Collaborated with Australia Cyber Award, Cyber Mentorship for Girls, Women in Cyber, UNSW SECSOC, and the Australian Parliament to mentor and conduct several outreach events.

Security Champion ProgramSecurity Development TrainingSecurity AutomationSASTDASTIAST+3

Adobe

Security Engineer

Jul 2014 – Oct 2015 · 1 yr 3 mos · Bangalore

Performing Penetration testing, analysing vulnerabilities, identifying threats, and recommending countermeasures
Code and design reviews for the APIs, applications and core libraries
Training various Engineers in Application Security Threats and Secure coding practices.
Security Research on top trending web-attacks and finding ways to mitigate them across the organisation.
Work with various development teams to embed security into SDLC.

Penetration testingvulnerability analysissecure coding practicessecurity researchApplication SecurityVulnerability Assessment

Tata consultancy services

Security Consultant

Jun 2012 – Jun 2014 · 2 yrs · Hyderabad Area, India

Coordinate with the client to identify suitable security assessment required for their web applications.
Penetration Testing, Source Code review, Design review
Hands on experience with OWASP top 10 and other security standards.
Review the security standards of a service provided by a vendor,
identify vulnerabilities in the service and categorise findings based on the risk involved and provide recommendations.
Security evaluation of new solutions and technologies.

Penetration TestingSource Code reviewDesign reviewOWASPSecurity Consulting

Sourcenxt

Co Founder and Advisory

Sep 2011 – Feb 2015 · 3 yrs 5 mos · Hyderabad Area, India

Co-founded the company with an aim of creating awareness among general internet users
Conducted training sessions in the field of Information Security.
Performed Security assessments in the fields of Web/Mobile Security.
Worked with government organization work in cyber investigations and incident response.
SourceNXT, one among first student-run startups recognized in India.

Information SecuritySecurity assessmentscyber investigationsincident responseCybersecurity Consulting

Kyrion digital securities

Intern: Corporate Trainer

May 2011 – Jul 2011 · 2 mos · Hyderabad Area, India

Trained on Basics of Network Architecture, Network Devices, Network Attacks, OSI, Wireless Networks, Network Security - Firewall Implementation, Intrusion Detection Systems, Honeypots, Vulnerability Assessment.
Trained engineers in the field of Information security and modules required to get certified as Certified Information Security Professionals.

Network ArchitectureNetwork SecurityWireless NetworksCorporate Training

Freelance

Trainer and Security Consultant

Aug 2009 – Sep 2011 · 2 yrs 1 mo · Home

Provide Penetration Testing services as a freelancer to various organisations.
Conduct training on Cyber Security Awareness across various Universities
Work with professors of various universities to create content for Infosec course curriculum

Penetration TestingCyber Security Awarenesscontent creationCybersecurity Training