Chandan Kumar Sahoo

Chandan Kumar Sahoo is a cybersecurity practitioner and entrepreneur with over 8 years of experience in security testing, software quality assurance, and offensive security strategy. He developed his technical foundation through quality and automation roles at Thomson Reuters and Paychex, where precision, repeatability, and risk management are non-negotiable standards. In 2020, Chandan co-founded Qualysec with a specific mandate, i.e. to deliver enterprise-grade penetration testing to organisations that have traditionally lacked access to it, particularly high-growth SaaS platforms, fintech companies, and digital-first enterprises. Under his leadership, Qualysec has grown into a globally recognised security testing firm with clients and engagements spanning the US, UK, Middle East, and Southeast Asia. His technical work is grounded in widely adopted industry frameworks, including OWASP Top 10, NIST SP 800-115, and PTES (Penetration Testing Execution Standard), with hands-on expertise across web application security, API security, network infrastructure testing, and cloud security assessments on AWS and Azure environments. He has worked extensively with compliance-driven engagements tied to SOC 2, ISO 27001, PCI DSS, HIPAA, and India's SEBI Cybersecurity and Cyber Resilience Framework (CSCRF). He has also holds industry-recognised certifications such as CompTIA Security+, ISO/IEC 27001:2022 Information Security Associate, and eJPT. These certifications demonstrate his ability to implement cybersecurity solutions through practical experience and adherence to industry standards. Chandan writes and speaks on the business case for proactive security, the cost implications of late-stage vulnerability discovery, and the maturation of India's offensive security ecosystem on the global stage. His commentary has been cited across industry forums and security publications covering emerging markets in cybersecurity.