Headline

Kredivo Group | OSWE | OSCP | OSWP | CRTP | eWPTXv2 | SRT

Location

Bengaluru

AI stack

opencode

claudecode

Work experience

Application Security Engineer at Kredivo Group, Sep 2024 - Present · 2 yrs, Bengaluru, -> Designed and operate an AI-augmented penetration testing pipeline (Claude Code + Burp Suite + MCP integrations + persistent memory store), reducing mean engagement time to ~6 hours. -> Led 12 full engagements and identified 201 verified vulnerabilities across web, mobile, and API applications with Burp Suite evidence and reproducible PoC per finding. -> Authored an in-house methodology library of 101 attack-class playbooks covering recon, injection, IDOR, race conditions, business logic, mobile, cloud, and WAF bypass. -> Established a multi-round autonomous testing protocol with coverage-matrix gating, counterfactual passes, adversarial self-review, and second-opinion validation. -> Primary triage for the public Kredivo bug bounty program; revalidated production fixes for race conditions, SSTI, schema disclosure, file upload, and credential exposure issues. -> Built SAST + alerting automation (-70% manual triage), optimized Jira/SLA workflows (+95% resolution efficiency), delivered security workshops to 200+ engineers.

Cyber Security Engineer at slice, Aug 2022 - Aug 2024 · 2 yrs 1 mo, Bengaluru, Karnataka, India, -> Rising Star Award for finding critical vulnerabilities in public-facing applications. ->Tested Slice Infra which includes internet-facing Mobile Applications, APIs, Web Applications, and Networks ->Reported 200+ vulnerabilities ->Performed Source Code Review and setup of SAST tools ->Participated in team-building exercises and 2 internal CTFs to promote secure coding practices

Application Security Tester (Assistant Manager - GET) at Jio, Jan 2021 - Aug 2022 · 1 yr 8 mos, -> Spotlight Award for finding critical vulnerabilities in the public facing applications. ->Tested 35+ applications which included major internet-facing Mobile Applications, APIs, Web Applications, and Networks ->Reported 450+ vulnerabilities ->Reviewed application infrastructure ->Performed Source Code Review ->Participated in team-building exercises and 3 internal CTFs to promote secure coding practices

Security Internship at Cyberops Infosec LLP, May 2020 - Jun 2020 · 2 mos, Jaipur, Rajasthan, -> Curated SCADA audit checklist -> Conducted external Network Pentest -> Used OSINT to gather information from different industries. -> Researched the SCADA attacks on India's Nuclear power plans -> Part took in the 15-day training program and completed 30 CTF challenges

Trainee at KARVY INNOTECH LTD., Dec 2019 - Jan 2020 · 2 mos, KPMG Gurgaon, -> Researched the security levels, compliance, and security of the data alongside the CIA of the company ‘KPMG’ -> Reviewed the logs of the SOC team -> Taught through practice and instruction over compliance and configured 100 onboarding users.

Education

Bachelor of Technology - BTech, Computer Science, UPES

St. Anselm's Pink City Sr. Sec. School, Jaipur