Payal Bisht

Application Security professional with 7 years of experience in securing web and API applications across enterprise and client environments. Strong expertise in secure SDLC, SAST/DAST/SCA, manual code review, and penetration testing. Proven track record of working with development teams to remediate vulnerabilities and embed security into CI/CD pipelines. Experienced in consulting, client-facing security assessments, and DevSecOps enablement.

Security Analyst - Accenture Solutions PVT. LTD. - Gurugram

(2021-06)

• Led application security assessments for web, and API applications across multiple clients.
• Conducted manual & automated penetration testing, identifying critical OWASP Top 10 vulnerabilities.
• Performed secure code reviews and provided actionable remediation guidance to development teams.
• Integrated SAST, DAST, and SCA tools into CI/CD pipelines, reducing production vulnerabilities.
• Facilitated threat modeling workshops and secure design reviews for new applications.
• Documented findings with CVSS scoring and remediation steps.
• Assisted in secure coding awareness sessions for development teams.
• Prepared executive-level security reports and presented risk posture to stakeholders.

Security Associate - Accenture Solutions PVT. LTD. - Gurugram

(2019-04 - 2021-05)

• Performed web and API security testing for internal and client applications.
• Implemented DevSecOps controls within Jenkins and GitLab pipelines.
• Collaborated with developers to fix vulnerabilities related to authentication, authorization, and business logic.
• Reduced false positives by tuning security scanning tools.
• Supported compliance initiatives (ISO 27001, SOC2 – AppSec scope).

Bachelor's Degree - Electronics & Communication Engineering - Graphic Era Hill University (2014 - 2018)