Shilpa Patnaik
Summary
Seasoned Application Security Engineer with over 9 years of experience in web, mobile, API, and network security assessments. Conducted various penetration tests and managed vulnerabilities while providing security consulting and remediation validation. Expertise in OWASP Top 10, SANS Top 25, and secure development practices.
Overview
11
11
years of professional experience
5
5
years of post-secondary education
1
1
Certification
Work History
Senior Security Analyst
Accenture
06.2022 - Current
- Conduct Web, API, Mobile, and Infrastructure penetration testing across enterprise applications.
- Identify and validate vulnerabilities including authentication issues, access control flaws, injection vulnerabilities, and business logic weaknesses.
- Coordinate remediation activities with development, infrastructure, IAM, and application teams.
- Deliver technical and executive-level security assessment reports.
- Track remediation activities and support risk management processes.
- Received Best Team Player Award within the first year of joining the project.
Senior Application Security Engineer
CDK Global
11.2019 - 06.2022
- Performed security assessments for customer-facing and internal applications.
- Executed White Box, Grey Box, and Black Box penetration testing engagements.
- Conducted mobile application security assessments using MobSF, Drozer, Burp Suite, and QARK.
- Provided remediation guidance and vulnerability validation support.
- Received appreciation from the Vice President for delivering high-quality security assessments and exceeding client expectations.
Cyber Security Engineer
eMudhra
12.2017 - 11.2019
- Performed Web Application, Mobile Application, and Network Security Assessments.
- Prepared detailed security reports including impact analysis, proof of concept, and remediation recommendations.
- Conducted security awareness sessions for developers and stakeholders.
Software Developer
Infyz Solutions
08.2016 - 01.2017
- Worked as a UI Developer contributing to web application development projects.
Android Development Intern
Grit Innovations
12.2015 - 08.2016
- Contributed to Android application development and performed software testing to ensure functionality and user experience.
Education
Post Graduate Program / Diploma - Cyber Security
IIDT
Tirupati 01.2017 - 12.2017
B.Tech - Information Technology
Gitam University
Visakhapatnam 06.2011 - 04.2015
Skills
- Web Application Security Testing
- Mobile Application Security Testing
- API Security Testing
- Network Vulnerability Assessment
- OWASP Top 10
- OWASP API Security Top 10
- AI-assisted Security Testing
- Generative AI Security Assessment
- Prompt Injection Testing
- LLM Security Fundamentals
- AI-powered Vulnerability Analysis
- PCI DSS
- Burp Suite Professional
- OWASP ZAP
- Nessus
- Nmap
- Wireshark
Certification
Certified Ethical Hacker (CEH)
Accomplishments
- Recognized by Vice President for outstanding security testing contributions.
- Successfully identified and reported critical security vulnerabilities across multiple applications.
- Delivered security awareness and secure coding guidance sessions.
Languages
English
Proficient
C2
Hindi
Advanced
C1
Telugu
Proficient
C2
Timeline
Senior Security Analyst
Accenture
06.2022 - Current
Senior Application Security Engineer
CDK Global
11.2019 - 06.2022
Cyber Security Engineer
eMudhra
12.2017 - 11.2019
Post Graduate Program / Diploma - Cyber Security
IIDT
01.2017 - 12.2017
Software Developer
Infyz Solutions
08.2016 - 01.2017
Android Development Intern
Grit Innovations
12.2015 - 08.2016
B.Tech - Information Technology
Gitam University
06.2011 - 04.2015