PRANAV PANDI

Security Analyst

https://talent.gravityer.com/pranav-pandi

Security Analyst with 5+ years in Application Security & DevSecOps

Key Strengths

Extensive experience in various penetration testing domains (web, mobile, API, network, cloud, thick-client) for enterprise clients.
Strong expertise in reverse engineering, including obfuscated code, native libraries, and ARM-based binaries, crucial for advanced mobile security.
Proficient in integrating security controls into CI/CD pipelines (DevSecOps), managing DAST, SAST, SCA, SBOM, and CBOM programs.
Demonstrated leadership in managing security consultant teams and mentoring junior analysts.
Solid understanding and practical experience with regulatory compliance frameworks (RBI, ISO 27001, NIST CSF, PCI DSS, HIPAA, SOC2).
Hands-on experience with a wide array of security tools (BurpSuite, Nmap, Nessus, Nikto, IDA Pro, Ghidra, Frida, MobSF, Fortify, Checkmarx, Dynatrace, Dependency-Track).
Experience in API security design and governance using Google Apigee, covering authentication, authorization, traffic management, and threat protection.
Active Directory attack simulation and Red Team experience, including Kerberoasting, LLMNR poisoning, and privilege escalation.
Proficiency in scripting and automation (Python, Bash, PowerShell) to enhance security testing efficiency.
Strong analytical skills in identifying critical vulnerabilities, performing root cause analysis, and providing remediation recommendations.

Cultural & Operational Fit

Cultural Fit Analysis

The candidate's diverse project experience across multiple domains and client types (enterprise clients) indicates adaptability and a broad perspective. Their involvement in leading teams, mentoring, and collaborating with various stakeholders suggests a team-oriented and collaborative mindset. The focus on regulatory compliance and secure SDLC initiatives aligns with a culture that values security best practices and structured processes. The breadth of skills, from deep technical reverse engineering to high-level GRC, shows a versatile professional who can contribute to different aspects of a security program.

Soft Skills & Operational Fit

The candidate demonstrates strong leadership and mentorship abilities, as evidenced by leading security teams and training junior analysts. Their experience in cross-functional collaboration with DevOps and engineering teams, as well as audit teams, indicates good operational fit. The ability to prepare client-ready technical reports and executive summaries suggests strong communication and presentation skills. The candidate's proactive approach to staying updated with emerging threats and AI-based pentesting techniques shows a commitment to continuous learning and adaptability.

AI is analyzing your overall score…

Identifying your key strengths…

Evaluating your skill match against the job requirements…

Assessing your cultural and operational fit

About

Senior Security Analyst with expertise in Application Security, DevSecOps, VAPT, API Security, and Regulatory Compliance. Experienced in leading security assessment teams, integrating security controls within CI/CD pipelines, and implementing SAST, DAST, SBOM, and CBOM programs using enterprise security tools. Skilled in Google Apigee API Security, RBI security audits, Secure SDLC, threat modeling, and cloud security assessments. Proven ability to identify and mitigate complex security risks, mentor security teams, and collaborate with cross-functional stakeholders to strengthen enterprise security posture and compliance.

Top Skills

Application SecurityDevSecOpsAPI SecurityRegulatory ComplianceProject Management

Experience

Novac Technology Solution

Senior Security Analyst

December 1, 2025 – Present

Chennai, Tamil Nadu, India

Apmosys Technology Pvt Ltd

Security Analyst

September 1, 2023 – November 1, 2025

Navi Mumbai, Maharashtra, India

Calance Software Pvt Ltd

Security Analyst

October 1, 2022 – September 1, 2023

Gurgaon, Haryana, India

NTT Data

GRC Analyst

October 1, 2020 – September 1, 2022

India

Key Strengths

Extensive experience in various penetration testing domains (web, mobile, API, network, cloud, thick-client) for enterprise clients.
Strong expertise in reverse engineering, including obfuscated code, native libraries, and ARM-based binaries, crucial for advanced mobile security.
Proficient in integrating security controls into CI/CD pipelines (DevSecOps), managing DAST, SAST, SCA, SBOM, and CBOM programs.
Demonstrated leadership in managing security consultant teams and mentoring junior analysts.
Solid understanding and practical experience with regulatory compliance frameworks (RBI, ISO 27001, NIST CSF, PCI DSS, HIPAA, SOC2).
Hands-on experience with a wide array of security tools (BurpSuite, Nmap, Nessus, Nikto, IDA Pro, Ghidra, Frida, MobSF, Fortify, Checkmarx, Dynatrace, Dependency-Track).
Experience in API security design and governance using Google Apigee, covering authentication, authorization, traffic management, and threat protection.
Active Directory attack simulation and Red Team experience, including Kerberoasting, LLMNR poisoning, and privilege escalation.
Proficiency in scripting and automation (Python, Bash, PowerShell) to enhance security testing efficiency.
Strong analytical skills in identifying critical vulnerabilities, performing root cause analysis, and providing remediation recommendations.

Cultural & Operational Fit

Cultural Fit Analysis

Soft Skills & Operational Fit

PRANAV PANDI

Key Strengths

Cultural & Operational Fit

About

Top Skills

Skills

Education

Experience

Certifications

Key Strengths

Cultural & Operational Fit