Anand Gupta

Co-Founder

Bengaluru, Karnataka, India11 yrs 8 mos experience

Highly Stable

Key Highlights

Led over 1000 security projects successfully.
Mentored 30+ consultants in cloud security.
Expert in vulnerability management and security testing.

Stackforce AI infers this person is a Cybersecurity expert specializing in cloud security and vulnerability management.

Contact

Skills

Core Skills

Vulnerability ManagementSecurity TestingCloud SecuritySecurity ArchitectureTechnical Leadership

Other Skills

AWS SecurityAmazon Web Services (AWS)Analytical SkillsAndroid Security TestingApplication Security ArchitectureApplication Security AssessmentsApplication TestingAssessment ToolsBurp SuiteBusiness ContinuityCNAPPClient RapportClient RequirementsCoachingCommunication

About

At BlackDuck, my focus as Associate Principal Consultant is on leading a high-impact Cloud Configuration Review, Vulnerability Assessment, Application Security, Mobile Security, Network Security service, while also serving as a mentor and trainer. This role leverages my expertise in web application, mobile, and web service security testing, as well as cloud security. With a history of leading teams and improving internal project quality and performance, my commitment is to excellence and innovation in cybersecurity. The responsibility of guiding both freshers and experienced hires through complex security landscapes is one I embrace with vigor. Our team's success in delivering end-to-end cloud security solutions is a testament to our collaborative approach, and it underscores our dedication to safeguarding our clients' digital assets.

Experience

11 yrs 8 mos

Total Experience

3 yrs 6 mos

Average Tenure

1 yr 8 mos

Current Experience

Isc2 bangalore chapter

Member

Jan 2025 – Present · 1 yr 5 mos

Black duck

Associate Principal Consultant

Oct 2024 – Present · 1 yr 8 mos · Bengaluru South, Karnataka, India · On-site

VulnerabilitySmall Team ManagementInternet Protocol Suite (TCP/IP)Organizational ConsultingOWASPVulnerability Management+2

Synopsys inc

3 roles

Associate Principal Consultant

Promoted

Jan 2024 – Apr 2025 · 1 yr 3 mos

Extensive experience in delivering secure solutions for global clients, conducting Security Architecture Reviews, Design Reviews, and Threat Modeling (STRIDE, PASTA, Attack Trees) to proactively identify and mitigate risks.
Expert in implementing OWASP ASVS, OWASP Top 10, CIS Benchmarks, NIST controls, and CVSS-based risk prioritization within projects.
Proven expertise in developing and executing Security Roadmap & Strategy Planning, Risk-Based Security Approaches, and Cross-Functional Collaboration with engineering and product leadership.
Expert at collaborating with senior engineering leadership on security priorities, mitigating supply-chain and infrastructure risks, and integrate security controls seamlessly into development processes.
Designed algorithm, drafted the project plan and managed the entire SDLC for highly customized Internal Assessment Quality & Performance Monitoring Tool which is used for providing assessment specific feedback to consultants and various performance and quality metrics to the management team to Plan Resource Utilization, Trainings & Career Development Plan for their respective direct reports.
Executed 1000+ projects across Secure Design Review, Threat Modelling, Web Application, Cloud, and API security.
Executed multiple threat modeling and security architecture reviews, enabling developers to identify risks early and reducing remediation effort by embedding secure design practices.
Driven technical leadership for AWS, GCP & Azure Cloud Security Configuration Review offerings, ensuring cloud service scalability and quality by creating standard documentation & policy.
Mentored 30+ consultants on cloud security, directly contributing to over 400 successful projects. Created and implemented company-wide technical training plans.
Enhanced security posture by contributing to policies, developing secure reference patterns and cookbooks, and assessing innovative security tools and methodologies.