Pavel Tsakalidis

Head Of Application Security

England, United Kingdom
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

🤩
Rockstar
🎓
Top School
Pavel Tsakalidis is a Head of Application Security with 12 years of experience leading AppSec and security engineering across financial technology and consulting environments. Based in the UK, he progressed from hands-on web and software engineering into senior security roles at Context Information Security and Accenture before taking leadership positions at Addepar. He combines practical offensive tooling experience—authoring a DLL/COM hijacking toolkit that automates proxy DLL generation using Ghidra—with strategic delivery and programme management for large clients. Pavel is comfortable bridging low-level reverse engineering and developer-focused security controls, enabling secure software delivery at scale. His background in server, database and e-learning platforms gives him a pragmatic appreciation for legacy system risks often overlooked in modern appsec programs.
code12 years of coding experience
job16 years of employment as a software developer
bookBachelor (Hons) Degree, Computer Science, Bachelor (Hons) Degree, Computer Science at University of Lancashire
github-logo-circle

Github Skills (9)

ghidra10
ws-api10
csharp10
winapi10
wp-api10
dotnet-core10
visual-studio9
cprogramming-language9
c-language9

Programming languages (7)

C#TypeScriptC++CGoPHPPython

Github contributions (5)

github-logo-circle
Accenture/Spartacus

Oct 2022 - Mar 2023

Spartacus DLL/COM Hijacking Toolkit
Role in this project:
userSecurity Engineer
Contributions:11 releases, 8 commits, 2 PRs in 4 months
Contributions summary:Pavel primarily contributed to the development of a DLL/COM Hijacking Toolkit. Their work focused on generating proxy DLLs for existing export functions, including the implementation of a proxy function generator utilizing Ghidra for function signature analysis and the generation of necessary project files (vcxproj, rc). Further contributions included bumping the version, documenting the command-line options, and replicating the version information from the original target DLL to the generated proxy DLL.
spartacusdll-injectiondll-hijackingdiscoveryhijacking
Accenture/Codecepticon

Sep 2022 - Jan 2023

.NET/PowerShell/VBA Offensive Security Obfuscator
Contributions:19 commits, 13 pushes, 1 branch in 4 months
powershellantivirus-evasionobfuscationcsharpvba
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial