Headline

VAPT | Web & API Pentesting | Mobile Security | Source Code Review | 3× Netflix CVEs | CEH, CRTA

About

Application security consultant with two years of hands-on VAPT experience, focused on finding and clearly explaining the vulnerabilities that actually matter. At qSEAp Infotech I've assessed 80+ web applications and 400+ APIs, alongside mobile static analysis and secure source code review (SAST, including Checkmarx). Outside of client work, my security research has earned 3 CVEs credited by Netflix. I think in vulnerability classes rather than one-off findings, and I like turning what I learn into repeatable checks and tooling. I share research on my blog (medium.com/@sour.exploit) and tooling on GitHub (github.com/sour-exploit). Open to mid-level AppSec / VAPT roles. Certifications: CEH (2025), CRTA

Location

Nashik

AI stack

antigravity

claude

Work experience

Associate Information Security Consultant at qSEAp Infotech Pvt Ltd, Jun 2024 - Present · 2 yrs 3 mos, Mumbai, Maharashtra, India, > - Performed manual and automated VAPT across 80+ web applications, identifying OWASP Top 10 and business-logic vulnerabilities > - Conducted security testing on 400+ APIs, covering authentication, authorization, and input-validation flaws > - Carried out mobile application static analysis and secure source code review (SAST, including Checkmarx) > - Authored detailed assessment reports with reproducible PoCs and remediation guidance for client engineering teams > - Owned the full assessment lifecycle from scoping through retesting and closure

Education

Bachelor's Degree, Computer Engineering, Savitribai Phule Pune University

Public links

github: https://github.com/sour-exploit

medium: https://medium.com/@sour.exploit