Prasad Keluskar
Product Security Consultant | Penetration Tester | AppSec Engineer
Offensive security specialist securing what matters - from code to AI systems.
Bangalore, India
9.6
Years in security
110+
Penetration tests
200+
High-severity findings
100+
Professionals mentored
About
Summary
Offensive Security Consultant with 9.6 years of experience delivering 110+ penetration tests across web, API, mobile, and cloud platforms.
Specializes in secure SDLC, SAST/SCA, cloud security posture assessments, Shift-Left threat modeling, and AI/LLM security from development through deployment.
Founder of AppSecWarrior, supporting security professionals through resume guidance, interview preparation, and hands-on application security training.
Open to opportunities
Product security, AppSec, offensive security, cloud security, and AI security.
Highlights
Selected work
Enterprise GenAI red teaming
Identified and remediated 12 high-severity prompt-injection and data-leakage paths, shaping secure architecture for two subsequent AI product launches.
Multi-cloud security
Performed Azure and AWS red teaming, achieving privilege escalation to Global Admin through a misconfigured service principal and improving posture score by 80%.
Secure SDLC enablement
Built a Security Champion program and integrated Shift-Left gates into Azure Pipelines, reducing recurring vulnerability classes by 65%.
Core banking API security
Chained BOLA, broken authentication, and mass assignment flaws into an account-takeover proof of concept for a Fortune 500 BFSI client.
Experience
Career path
Start → education → roles → next — tap a milestone for details.
Start
Career start
Ready for cybersecurity journey
Edu
Education
MCA - Master of Computer Applications
Next
Ready for next challenge
Open to product security and AppSec work
-
01 Aug 2023 - PresentProduct Security Consultant
- Advises development and DevOps teams across 5+ enterprise clients, reducing critical vulnerabilities by 35%.
- Conducted 10+ cloud penetration tests across Azure, AWS, and GCP, identifying 200+ high-severity findings.
- Embedded SAST, SCA, cloud posture assessments, and STRIDE threat modeling so 100% of releases pass security gates.
- Led a Security Champion program for 100+ developers, reducing recurring code issues by 50%.
- Contributed to security assessments of 6+ GenAI applications for prompt injection and adversarial ML risks.
-
02 Sep 2021 - Jul 2023Senior Security Delivery Analyst
- Executed 50+ penetration tests across web, mobile, and API platforms for Fortune 500 BFSI and Telecom clients.
- Designed phishing simulations for 10,000+ employees, reducing click-through rates by 40%.
- Led threat modeling sessions and remediation roadmaps that cut average vulnerability resolution time by 25%.
- Mentored 30 junior analysts and standardized testing methodology and reporting practices.
-
03 Aug 2019 - Sep 2021Senior Security Analyst
- Rolled out secure coding standards, mandatory peer review, and automated SAST gating, cutting production vulnerabilities by 90%.
- Embedded security testing throughout the development lifecycle and shortened fix cycles by 20%.
- Investigated complex business logic flaws and authored enterprise security policies and SOPs.
-
04 May 2018 - Jul 2019Test Engineer
- Executed VAPT and remediation-validation cycles across enterprise web applications.
- Supported threat modeling and attack-surface analysis while co-designing cross-functional quality gates.
-
05 Dec 2015 - Apr 2017Junior Test Engineer
- Performed manual and automated security testing using OWASP Top 10 techniques under senior mentorship.
- Contributed to vulnerability triage, documentation, and early-stage reporting.
Skills
Focus areas
Web, API, Mobile & Thick-Client VAPT
AI / LLM Security & Red Teaming
Secure Code Review, SAST, SCA & DAST
Cloud Security: Azure, AWS & GCP
Threat Modeling: STRIDE & MAESTRO
Secure SDLC & Shift-Left Security
Toolkit
Tools & frameworks
Pentesting
Burp Suite Pro · Metasploit · Wireshark · BloodHound · Mimikatz · Rubeus · SharpHound · SQLMap · XSStrike · Akto · Postman · Frida · MobSF · Drozer
SAST & SCA
SonarQube · Snyk · Veracode · Fortify · Trivy · OWASP Dependency-Track · Aikido
AI Security
AdverTorch · LLM Guard · Promptfoo · Garak · Raptor · PromptShield · Presidio
Cloud Security
ScoutSuite · Prowler · Pacu · CloudMapper · Azure Security Center · AWS Config · GCP Security Command Center
Frameworks
OWASP · MITRE ATT&CK · CVSS v4.0 · PCI-DSS · OWASP SAMM · MAESTRO
Recognition
Achievements & education
Achievements & certifications
- Advanced AI Red Teaming (AI-300) - OSAI / Offensive Security, anticipated October 2026
- Certified Red Team Professional (CRTP) - Altered Security
- Burp Suite Certified Practitioner (BSCP) - PortSwigger
- Certified Application Security Engineer (CASE) and Certified Ethical Hacker (CEH) - EC-Council
- AZ-500 and SC-100 - Microsoft Security Certifications
- Certified Tester Foundation Level (CTFL) and Certified Tester Security Tester (CTSEC) - ISTQB
- Certified Digital Forensics Analyst (CDFA) - Data64 Techno Solutions and ASCL
- PortSwigger Burp Champion, SecurityBoat speaker, and OWASP contributor
- Founder, AppSecWarrior - mentored and trained 100+ security professionals
Education
- Master of Computer Application (MCA) - Savitribai Phule Pune University
- Bachelor of Computer Science (BCS) - Mumbai University
Next step
