Nitish Shah

Versatile Security Consultant and Application Security Engineer with 8+ years of dedicated experience in application security, penetration testing, and vulnerability management. Proven track record of identifying, validating, and mitigating complex security risks across web applications, APIs, and cloud environments. Adept at conducting rigorous security assessments and discovering latent vulnerabilities in forgotten or misconfigured assets that evade conventional testing.

Collaborates seamlessly with cross-functional engineering, DevOps, and Security Operations teams to align remediation strategies with business goals. Passionate about driving proactive security controls, strengthening attack surface resilience, and continuously improving organizational security postures.

Application Security Engineer & Security Consultant (Full-Time Freelance) at Crowdsourced Security Platforms & Client Engagements (2019-01 – Present)

• Led end-to-end Application Security (AppSec) assessments, vulnerability management, and penetration testing across web applications, REST/GraphQL APIs, and cloud infrastructure with 8+ years of dedicated experience.
• Authored and submitted 500+ technical security assessment reports featuring comprehensive risk evaluations using CVSS scoring, threat modeling, business impact analyses, actionable PoCs, and architectural remediation guidance.
• Partnered closely with cross-functional engineering, DevOps, and security operations (SecOps) teams during triage, vulnerability lifecycle management, and post-remediation verification to ensure complete risk mitigation.
• Drove security assessment engagements across enterprise client environments, consistently demonstrating high signal-to-noise ratios, thorough vulnerability triage, and rapid response times.
• Executed security assessments adhering to OWASP, PTES, and NIST frameworks, ensuring compliance with enterprise security policies and coordinated vulnerability disclosure standards.

BCA (Hons.) in Computer Applications – B.I.S.T (2017-01)