Getting back into academics after an industry stint: what can I do while still in industry to improve my research profile? I am a computer science engineer with around 3 years of experience designing and implementing large scale software systems. I chose to join a job right after my masters, to get a feel of what the industry holds. Having spent my bit here, I now want to get back to academics, especially back into my areas of specialisation. I hold a masters in computer science with a specialisation in Information Security, but no publications. I have a decent (mediocre?) GPA of 8.8 in my masters. I also managed to publish a thesis during my stay in college. However, there is no publication associated with the subject matter of the thesis itself.

What should I do to build upon my profile? Here's a list of things I'm already trying - 


Contributing to Open Source Software in Security.
Changing my job to fit a more "security" based profile. However, as I have not worked directly in this area for the past three years, this is proving to be a tad difficult.
Trying to learn the ropes of ethical hacking (think bugcrowd for instance).


What I have NOT done (yet)-


Directly contacting professors/post-grads (or even peers who got into research) working in the areas I'm interested in.


I'm not sure if all this, even though time consuming, would lead to any concrete results. Can my industry experience lead to anything? Am I on the right track? What are other things I could do?

To be more specific, I'm looking for pointers to things that can be done while in the industry to construct a research profile.
I also took roughly 2-3 years "off" from academia to work in industry before starting my PhD (not computer science related). I actually think such stints are useful if you frame them in a certain way. You could talk in your statement of purpose about your journey to applying to the PhD, including why you went into industry after the Master's degree instead of continuing to the PhD. Many students struggle in their statements to convey why they wish to obtain the PhD and/or why they feel that they can ultimately finish the degree. In your case, you can talk about going into industry to figure out whether you truly want to go back into academia (the "if you love it, let it go" approach), and then talk about how what you're doing in industry directly applies to what you wish to study. I think many programs would welcome such an application. 

I'm less familiar with what 8.8 means, so I cannot comment on whether this is a detriment or not. Having no publications after completing a Master's degree and 3 years post-Master's degree may be a weak spot that you should address in your application. At least in the U.S., graduate admissions can be influenced--sometimes heavily--by personal connections. To that end, I would recommend contacting potential PhD supervisors very soon to introduce yourself and inquire about any openings s/he may have for PhD students. It does take a non-trivial amount of time, but I do think it's worth it.