Siddhant Rankhambe

Application Security Specialist with almost 6 years of experience in Software Composition Analysis (SCA), Vulnerability Assessment and Penetration Testing (VAPT), and secure code review, specializing in identifying and mitigating vulnerabilities across web, API, and mobile applications. Experienced in securing open-source dependencies using Nexus IQ, performing CVE analysis, and prioritizing risks based on business impact and exploitability. Strong expertise in OWASP standards, secure SDLC, and DevSecOps practices, with hands-on experience integrating security into CI/CD pipelines.

Proven ability to collaborate with cross-functional teams to drive remediation efforts, enhance application security posture, and ensure compliance within enterprise and banking environments.

Application Security Specialist at UBS Business Solutions (India) Private Limited (2025-06 – Present)

• Perform Software Composition Analysis (SCA) using Nexus IQ to identify vulnerabilities in open-source and third-party components
• Analyze CVEs, validate findings, and prioritize vulnerabilities based on CVSS score, exploitability, and business impact
• Enforce open-source security policies and governance using Nexus IQ
• Conduct reachability analysis to determine actual risk exposure of vulnerable libraries
• Validate false positives and provide risk acceptance or mitigation recommendations
• Collaborate with development teams to remediate vulnerabilities through upgrades, patches, or secure alternatives
• Track and manage vulnerability remediation lifecycle ensuring SLA compliance
• Integrate SCA scanning into CI/CD pipelines to support DevSecOps practices
• Provide guidance on secure dependency management and license compliance
• Generate dashboards and reports for stakeholders on vulnerability trends and risk posture
• Support internal audits and compliance requirements related to open-source security

Cybersecurity Consultant at Deloitte Touche Tohmatsu India LLP (2023-03 – 2025-05)

• Conducted security assessments for web, API, and mobile applications across banking and insurance domains
• Performed SAST using Fortify and Checkmarx to identify and remediate code-level vulnerabilities
• Executed DAST to uncover runtime security issues and ensure OWASP compliance
• Led threat modeling and architecture security reviews
• Identified vulnerabilities including XSS, SQL Injection, CSRF, Authentication Bypass, and Broken Access Control
• Prepared detailed security reports with risk classification and remediation guidance
• Collaborated with developers to enforce secure coding practices
• Managed client communication and ensured timely delivery of security engagements

Cybersecurity Engineer at Cybersecurist Technologies Pvt. Ltd (2022-06 – 2023-02)

• Performed Web, API, and Mobile Application Penetration Testing
• Conducted manual and automated secure code reviews
• Ensured compliance with OWASP and industry standards
• Assisted developers in vulnerability remediation
• Delivered structured and actionable security reports

Junior Cybersecurity Engineer at Cybersecurist Technologies Pvt. Ltd (2020-06 – 2022-06)

• Conducted penetration testing for web, API, and mobile platforms
• Identified vulnerabilities such as IDOR, XSS, misconfigurations, and access control issues
• Performed DAST and manual code reviews
• Supported threat modeling and secure architecture improvements
• Created detailed reports with remediation recommendations

Bachelor of Engineering in Computer Engineering – Sinhgad's Institute SKN College of Engineering, Pune (2017 – 2020)

Diploma in Information Technology – Bharati Vidyapeeth Jawaharlal Nehru Institute of Technology (2014 – 2017)