Siddharth Joshi

Associate Consultant

Ahmedabad, Gujarat, India6 yrs 2 mos experience

Highly StableAI Enabled

Key Highlights

Expert in advanced penetration testing and presales.
Mentor for junior penetration testers, enhancing team capabilities.
Contributed to open-source security projects, showcasing community commitment.

Stackforce AI infers this person is a Cybersecurity expert with a focus on penetration testing and offensive security.

Contact

Skills

Core Skills

Penetration TestingPresales

Other Skills

AI PentestingArtificial Intelligence (AI)Active DirectoryRed TeamWeb pentestCybersecurityCTFLinux

About

🚀 Cybersecurity isn’t just my career, it’s my curiosity turned into purpose. As a Senior Penetration Tester at Bulletproof, I help organisations strengthen their defences by identifying and remediating vulnerabilities before attackers can exploit them. 🔐 I hold certifications including OSCP, CREST CPSA & CRT, CRTP, CNPen, CAPen and BSCP, and I’m constantly learning to stay ahead in an ever-evolving field. My experience spans penetration testing, red teaming, and security training, where I enjoy breaking down complex concepts and making them accessible. 🛠️ I’ve also built and contributed to open-source security projects like JWTAuditor (for testing JSON Web Tokens) and Formatify (a burp extension for structured data formatting and automation). These projects reflect my passion for solving real-world security problems and giving back to the community. 🛡️ Beyond client engagements, I share my knowledge through blogs, guides, and resources for the security community turning real-world experience into actionable insights. 💡 I approach cybersecurity with equal parts seriousness and curiosity, but also with the belief that learning (and even hacking) should be engaging. After all, building safer digital landscapes doesn’t mean we can’t enjoy the journey along the way.

Experience

Worknest

Senior Offensive Security & Presales Consultant

Feb 2026 – Present · 2 mos

Leading technical presales activities across offensive security engagements (web, mobile, network, cloud).
Serving as the technical authority during client calls, RFP responses, and solution presentations.
Translating business requirements into technically sound and commercially viable security solutions.
Delivering advanced penetration testing engagements across web, mobile (Android/iOS), and infrastructure environments.
Acting as the bridge between sales, delivery, and executive stakeholders.

Penetration TestingPresales

Bulletproof (cyber security)

2 roles

Senior Penetration Tester

Promoted

Sep 2025 – Feb 2026 · 5 mos · Remote

Acted as a mentor to junior and mid-level penetration testers.
Delivered complex web application, mobile (Android/iOS), and network penetration testing engagements.
Produced detailed technical and executive-level reports with clear remediation strategies.
Contributed to methodology improvements and internal knowledge sharing initiatives.

Penetration Tester

Jul 2022 – Sep 2025 · 3 yrs 2 mos · Remote

Delivered a wide range of penetration testing engagements, with a primary focus on application security.
Developed proof-of-concept exploits to validate exploitability and demonstrate tangible business impact.
Communicated findings through technically detailed yet business-aligned reports, clearly outlining risk, attack paths, and remediation strategy.

Penetration Testing

Net square solutions pvt. ltd.

Security Analyst

Jan 2021 – Jul 2022 · 1 yr 6 mos · Ahmedabad · Remote

Conducted structured web application and API security assessments aligned with OWASP testing methodologies.
Authored detailed technical reports outlining risk severity, attack scenarios, and remediation guidance.
Presented assessment results to both technical and non-technical stakeholders, translating technical risk into business impact.
Supported remediation efforts through consultation and verification testing to ensure effective resolution.

Penetration Testing

Pristine infosolutions

Cyber Security Trainer

Feb 2020 – Jan 2021 · 11 mos · Ahmedabad · On-site

Designed and delivered hands-on training programs on web application security, network security, and secure development practices.
Conducted practical workshops covering real-world attack simulations and defensive strategies.
Mentored students in understanding security assessment methodologies and industry standards.
Developed structured learning materials, labs, and exercises to bridge theoretical concepts with practical execution.