Akshay Jain profile photo 1 on Tal

Akshay Jain

Leading Cyber Security @ Cars24 | Ex Times | Offensive Security | AI Security Enthusiastic | Cyber Security | Red Teaming | Code security

Delhi

About Akshay

CARS24
Feb 20267 mosPresent

Built Agentic AI for automated Network VAPT with LLM reasoning improving efficiency by 70% and decreasing manual effort by 90% accross team. Conducted regular and ad-hoc security checks, threat modeling for AI workflows, spotlight projects and IAM Governance. Engineered Cloudflare WAF with 150+ custom firewall rules, bot scoring policies, and rate-limiting configurations by reducing malicious traffic by 85%. Rolled out Netskope CASB and DLP policies enforcing Cloudflare Zero Trust Network Access (ZTNA) across 500+ endpoints and 30+ SaaS applications. Drove compliance audits (ISO 27001, DPDP) achieving regulatory readiness and clean audit outcomes. Administered Google Workspace Admin Console Security Logs and Scalefusion MDM for 6,000+ users and 5000+ corporate devices. Drove real-time SIEM stack authoring 40+ custom threat detection rules; reduced mean detection time from 4 hours to under 20 minutes. Built Agentic-AI Security Auto approvals for Slack, Github oAuth, Vendor Assessment and other third party regular integrations.
Aspire
May 202510 mosFeb 2026

Designed and deployed agentic AI security workflows for automated threat detection, vulnerability correlation, and remediation ticketing integrated with JIRA and Slack. Implemented Cloudflare WAF with 150+ custom rules, rate limiting, and bot mitigation policies; reduced malicious traffic by 85% across production APIs. Spearheaded SIEM onboarding onto Grafana and Datadog with custom detection rules, dashboards, and alerting for application-layer threats and anomaly detection. Established IaC security pipeline using Checkov and tfsec on Terraform codebases, blocking 100% of critical misconfigurations pre-deployment. Conducted Android/iOS and Web/API security assessments, integrating findings into sprint cycles via GitHub Actions security gates.
AppDirect
Nov 20231 yr 7 mosMay 2025

Owned end-to-end VAPT, reducing open critical/high vulnerabilities by 60% within 18 months. Built Golang security automation tools, automating 40% of security assessments and saving 120+ engineering hours per quarter. Implemented SIEM dashboards in Datadog for real-time threat monitoring. Secured CI/CD pipelines (Jenkins, GitHub Actions, ArgoCI). Containerized security: scanned 350+ Kubernetes images using Lacework and Clair, reducing container CVEs by 72% across microservices architecture. Executed Red Team assessments and phishing simulations (on-premise and cloud) using Cobalt Strike, C2 infrastructure, and custom payloads. Performed AD enumeration and threat modeling with HoneyCombs, breadcrumbs, and PingCastle to detect lateral movement risks. Managed Bug Bounty program and third-party security audits. Delivered secure coding training to 80+ engineers covering OWASP Top 10.
Times Internet
Apr 20212 yrs 7 mosOct 2023

Noida, Uttar Pradesh, India

• Performed manual and automated security testing for 55+ web and mobile applications. • Conducted security assessments for 30+ Android/iOS apps using MobSF and Burp Suite. • Built security tools with Golang, Python, Bash, and PowerShell to automate processes. • Conducted API Security Assessments for 100+ REST/SOAP APIs. • Executed AD pentesting and red team assessments on Azure and in-house AD forests. • Reviewed source code for 250+ repositories manually and using automated tools.
Panacea InfoSec (P) Ltd
Jul 20182 yrs 9 mosMar 2021

New Delhi

1. Completed vulnerability scans to identify at-risk systems and remediate issues. 2. Performed Network VAPT on more than 10K IP addresses. 3. Performed Secure Code Review on more than 50 Codes using HP Fortify. 4. Performed multiple types of Application Security Testing including Web, API, Thick-client, Android, iOS etc. 4. Successfully performed multiple Red Team Assessments. 5. Expertise in working on PCI-DSS and CERT-in projects. 6. Exposure in variety of projects such as; System Hardening, Configuration Review, Wireless Audits etc. 7. Provided safety reports and vulnerability analysis to building managers to inform security processes. 8. Conducted security audits to identify vulnerabilities. 9. Researched and developed multiple computer script to automate the work. 10. Performed risk analyses to identify appropriate security countermeasures.

what i've built with AI

I have built fully autonomous agentic security tool that maps code with deployed clusters then perform, SAST DAST etc

The last shipped feature I'm proudest of…

Realtime Malware feed to early detect supply chain attacks

GitHub
@wr3nch0x1

Akshay’s AI Stack

anthropic apis
anthropic apis
antigravity
antigravity
claude code
claude code
codex
codex
deepseek
deepseek
gemini
gemini

Education

Indira Gandhi National Open University

Bachelor of Computer Science, Computer/Information Technology Administration and Management

Indira Gandhi National Open University

20173 yrs2020
Indira Gandhi National Open University

Bachelor's Degree

Indira Gandhi National Open University

Join Akshay and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Akshay Jain on Tal

Headline

Leading Cyber Security @ Cars24 | Ex Times | Offensive Security | AI Security Enthusiastic | Cyber Security | Red Teaming | Code security

About

Akshay is 8 years experienced Cloud and Application Security Engineer with a demonstrated history of working in the Cyber Security and Information Security industry. He also holds hands-on experience in Red Teaming, Application Security, PCI DSS, PA DSS, Source Code Review, Active Directory, OWASP 10, AWS configuration audit, System Administrator, Python, Powershell, and Network Pentesting. Achievements: 1. CVE-2021-3689 2. CVE-2021-3692 Specialties & Skills: 1.) Red Team Assessment 2.) Secure Code Review 3.) Network Vulnerability Assessment and Penetration Testing 4.) Application Security Testing (Thick-client/Web/API/Mobile) 5.) Wireless Network Security 6.) System Hardening and Security Review 7.) Cloud Security and Configuration Review 8.) PCI Segmentation Penetration Testing 9.) PCI ASV Scanning 10.) Malware and Bot Analysis 11.) Active Directory (AD) Penetration Testing 12.) Exposure in Arduino and Raspberry PI 13.) Threat Modeling and Log Monitoring 14.) DevSecOps and CI/CD pipelines 15.) Attack Surface Monitoring and Deception Monitoring

Location

Delhi

AI stack

anthropic apis

antigravity

claude code

codex

deepseek

gemini

Work experience

Cyber Security Lead at CARS24, Feb 2026 - Present · 7 mos, Built Agentic AI for automated Network VAPT with LLM reasoning improving efficiency by 70% and decreasing manual effort by 90% accross team. Conducted regular and ad-hoc security checks, threat modeling for AI workflows, spotlight projects and IAM Governance. Engineered Cloudflare WAF with 150+ custom firewall rules, bot scoring policies, and rate-limiting configurations by reducing malicious traffic by 85%. Rolled out Netskope CASB and DLP policies enforcing Cloudflare Zero Trust Network Access (ZTNA) across 500+ endpoints and 30+ SaaS applications. Drove compliance audits (ISO 27001, DPDP) achieving regulatory readiness and clean audit outcomes. Administered Google Workspace Admin Console Security Logs and Scalefusion MDM for 6,000+ users and 5000+ corporate devices. Drove real-time SIEM stack authoring 40+ custom threat detection rules; reduced mean detection time from 4 hours to under 20 minutes. Built Agentic-AI Security Auto approvals for Slack, Github oAuth, Vendor Assessment and other third party regular integrations.

Lead Application Security at Aspire, May 2025 - Feb 2026 · 10 mos, Designed and deployed agentic AI security workflows for automated threat detection, vulnerability correlation, and remediation ticketing integrated with JIRA and Slack. Implemented Cloudflare WAF with 150+ custom rules, rate limiting, and bot mitigation policies; reduced malicious traffic by 85% across production APIs. Spearheaded SIEM onboarding onto Grafana and Datadog with custom detection rules, dashboards, and alerting for application-layer threats and anomaly detection. Established IaC security pipeline using Checkov and tfsec on Terraform codebases, blocking 100% of critical misconfigurations pre-deployment. Conducted Android/iOS and Web/API security assessments, integrating findings into sprint cycles via GitHub Actions security gates.

Senior Application Security Engineer at AppDirect, Nov 2023 - May 2025 · 1 yr 7 mos, Owned end-to-end VAPT, reducing open critical/high vulnerabilities by 60% within 18 months. Built Golang security automation tools, automating 40% of security assessments and saving 120+ engineering hours per quarter. Implemented SIEM dashboards in Datadog for real-time threat monitoring. Secured CI/CD pipelines (Jenkins, GitHub Actions, ArgoCI). Containerized security: scanned 350+ Kubernetes images using Lacework and Clair, reducing container CVEs by 72% across microservices architecture. Executed Red Team assessments and phishing simulations (on-premise and cloud) using Cobalt Strike, C2 infrastructure, and custom payloads. Performed AD enumeration and threat modeling with HoneyCombs, breadcrumbs, and PingCastle to detect lateral movement risks. Managed Bug Bounty program and third-party security audits. Delivered secure coding training to 80+ engineers covering OWASP Top 10.

Application Security Engineer at Times Internet, Apr 2021 - Oct 2023 · 2 yrs 7 mos, Noida, Uttar Pradesh, India, • Performed manual and automated security testing for 55+ web and mobile applications. • Conducted security assessments for 30+ Android/iOS apps using MobSF and Burp Suite. • Built security tools with Golang, Python, Bash, and PowerShell to automate processes. • Conducted API Security Assessments for 100+ REST/SOAP APIs. • Executed AD pentesting and red team assessments on Azure and in-house AD forests. • Reviewed source code for 250+ repositories manually and using automated tools.

IT Security Analyst at Panacea InfoSec (P) Ltd, Jul 2018 - Mar 2021 · 2 yrs 9 mos, New Delhi, 1. Completed vulnerability scans to identify at-risk systems and remediate issues. 2. Performed Network VAPT on more than 10K IP addresses. 3. Performed Secure Code Review on more than 50 Codes using HP Fortify. 4. Performed multiple types of Application Security Testing including Web, API, Thick-client, Android, iOS etc. 4. Successfully performed multiple Red Team Assessments. 5. Expertise in working on PCI-DSS and CERT-in projects. 6. Exposure in variety of projects such as; System Hardening, Configuration Review, Wireless Audits etc. 7. Provided safety reports and vulnerability analysis to building managers to inform security processes. 8. Conducted security audits to identify vulnerabilities. 9. Researched and developed multiple computer script to automate the work. 10. Performed risk analyses to identify appropriate security countermeasures.

Education

Bachelor of Computer Science, Computer/Information Technology Administration and Management, Indira Gandhi National Open University

Bachelor's Degree, Indira Gandhi National Open University

Profile highlights

what i've built with AI: I have built fully autonomous agentic security tool that maps code with deployed clusters then perform, SAST DAST etc

The last shipped feature I'm proudest of…: Realtime Malware feed to early detect supply chain attacks

Public links

github: https://github.com/wr3nch0x1