Gaurav Bhosale

Founder

Indore, Madhya Pradesh, India8 yrs 5 mos experience

Most Likely To SwitchAI ML Practitioner

Key Highlights

8+ years in cybersecurity across multiple industries.
Founded Secure Code Village to enhance code security.
Recognized by 20+ companies for security contributions.

Stackforce AI infers this person is a Cybersecurity Specialist with a focus on Application Security and Compliance.

Contact

Skills

Core Skills

Vulnerability AssessmentPenetration TestingApplication SecurityVulnerability ManagementDevsecopsSecurity Compliance

Other Skills

AI SecurityAL ML PentestingAPI Penetrating TestingAWS Identity and Access Management (AWS IAM)AWS SecurityAmazon Web Services (AWS)Application Security AssessmentsArchitecture ReviewsBenefits AdministrationBitbucketC++CI CDCTFCloud DevelopmentCoding Practices

About

I’m a Computer Science Engineering graduate who’s spent the last 8+ years helping organizations keep their digital assets safe. Over the years, I’ve worked across Healthcare, Financial Services, Government, and Retail, and with some of the biggest names in tech payments. Along the way, 20+ companies have recognized my contributions to improving their security. My work spans everything from web and network penetration testing to secure code reviews, cloud security, DevSecOps, and compliance audits like SOC 2 and ISO 27001. I enjoy getting hands-on with security- whether it’s uncovering vulnerabilities in a mobile app, threat modeling a new system, or helping teams shift security left in their development process. I’m always learning, because in cybersecurity, the landscape never stops changing. And I like sharing what I learn - you can find some of my thoughts and experiences on my Medium blog: https://medium.com/@gb452011

Experience

8 yrs 5 mos

Total Experience

2 yrs 4 mos

Average Tenure

8 yrs 5 mos

Current Experience

Secure code village

Founder

Mar 2025 – Present · 1 yr 3 mos · Remote

Founded Secure Code Village, an open community dedicated to enhancing code security for developers and security engineers. Developed resources and tools to help identify and fix vulnerabilities in the early stages of development.

10x banking

Application Security Engineer

Oct 2023 – Jul 2025 · 1 yr 9 mos · London Area, United Kingdom · Remote

Mastercard

Vulnerability Analyst II - Application Security Team

Oct 2022 – Sep 2023 · 11 mos · Pune, Maharashtra, India · Hybrid

Working in the Application Security Team, handling the security of Web Application, Network & APIs.

JSON Web Token (JWT)RemediationSecurity ComplianceLeadershipOAuthVulnerability Management+20

Payatu

2 roles

Colead DevSecOps - Security Consultant

Promoted

Apr 2022 – Oct 2022 · 6 mos · Pune, Maharashtra, India · Remote

Privacy ProtectionWeb3CI CDJSON Web Token (JWT)RemediationISO 27001+27

Associate Security Consultant

Oct 2020 – Mar 2022 · 1 yr 5 mos · Pune, Maharashtra, India · Remote

JSON Web Token (JWT)RemediationWeb application penetration testingOAuthProduct SecuritySCA+19

Synack red team

Red Team Member

Jun 2021 – Jul 2022 · 1 yr 1 mo

Web application penetration testingVulnerability ManagementNetwork Security TestingAPI Penetrating TestingVulnerability AssessmentMobile Security+2

Freelance

Freelance Cyber Security Consultant/Advisor

Jan 2018 – Present · 8 yrs 5 mos · Indore, Madhya Pradesh, India · Remote

As a freelance cybersecurity consultant, I offer comprehensive services in Vulnerability Assessment and Penetration Testing (VAPT) across web applications, networks, mobile platforms, and cloud infrastructures. I assist clients in achieving ISO 27001 and SOC 2 compliance by implementing robust security frameworks and conducting thorough audits. Additionally, I specialize in integrating DevSecOps practices into development pipelines, utilizing tools such as Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Interactive Application Security Testing (IAST) to enhance software security. My goal is to provide tailored security solutions that protect digital assets and ensure regulatory compliance

Cloud DevelopmentTransport Layer Security (TLS)AWS SecurityPresentationsNetwork Security TestingAPI Penetrating Testing+8