Headline

Security Engineer- II @Accorian | CWES | PWPA

About

Aspiring cybersecurity enthusiast with a keen interest in penetration testing and ethical hacking. With a proactive mindset and strong problem-solving abilities, I am committed to continuous learning and professional growth in the rapidly evolving field of cybersecurity. Let's connect to discuss cybersecurity challenges, share insights, and explore potential collaboration opportunities.

Location

Bangalore Urban

AI stack

claude

notion

openai

Work experience

Security Engineer-II at Accorian, Apr 2025 - Present · 1 yr 5 mos, Bengaluru, Karnataka, India, • Web & API Security: Delivered in-depth security assessments on web applications and APIs (REST & GraphQL) using Burp Suite Professional and custom Python scripts, uncovering critical flaws in authentication, authorization, and business logic. • Network Security: Performed internal and external network vulnerability assessments using Nessus and horizon, identifying security weaknesses, misconfigurations, and exposed services across enterprise environments. • AI/LLM Security: Spearheaded end-to-end penetration testing on AI and LLM systems, executing prompt injection, context manipulation, and system prompt leakage attacks to uncover real-world vulnerabilities mapped to the OWASP LLM Top 10. • Cloud Security: Carried out comprehensive cloud security reviews across AWS, Azure, and GCP, benchmarking configurations against CIS standards and flagging critical misconfigurations in IAM and cloud-native services. • Mobile (Android) Security: Shadowed Android app penetration testing using Frida and JADX, uncovering runtime vulnerabilities, insecure storage, hardcoded credentials, and API interception risks through dynamic analysis. • Social Engineering & Phishing: Designed and executed phishing simulations via KnowBe4. • Attack Surface Management: Managed attack surface and brand security assessments, identifying shadow assets, exposed APIs, and leaked credentials to significantly reduce the organization's external threat exposure.

Security Engineer-I at Accorian, Feb 2024 - Mar 2025 · 1 yr 2 mos, Hybrid, • Web & API Security: Delivered in-depth security assessments on web applications and APIs (REST & GraphQL) using Burp Suite Professional and custom Python scripts, uncovering critical flaws in authentication, authorization, and business logic. • Cloud Security: Carried out comprehensive cloud security reviews across AWS, Azure, and GCP, benchmarking configurations against CIS standards and flagging critical misconfigurations in IAM and cloud-native services. • Social Engineering & Phishing: Designed and executed phishing simulations via KnowBe4, built realistic attack scenarios, and delivered targeted security awareness training — driving measurable improvement in employee resilience. • Attack Surface Management: Managed attack surface and brand security assessments, identifying shadow assets, exposed APIs, and leaked credentials to significantly reduce the organization's external threat exposure.

Education

BTech, information science and engineering, nitte meenakshi institute of technology