Headline

Cyber Security Engineer | VAPT & Penetration Testing | Web, Mobile & API Security | Identifying Vulnerabilities & Providing Actionable Remediation

About

🛡️ Your users expect safety; my job is to make sure they get it. Curious how? Hit “see more.” I started my journey three years ago, digging through code and configs to see what attackers might see. Two years in, VAPT became my daily grind—scanning, probing, and reporting on web apps, mobile apps 📱, APIs, cloud stacks, and early AI tools. Highlights• Found and helped fix high-impact flaws that saved teams weeks of rework 🔧• Matched every finding to OWASP and cloud best practices, making reports easy to track• Worked side by side with engineers so patches rolled out smoothly, not loudly• Delivered brown-bag sessions that turned curious teammates into security-minded allies 🧑‍🤝‍🧑 I enjoy taking complex security talk and turning it into plain advice that a busy product owner can follow. My toolkit includes Burp, Postman, Wireshark, AWS Inspector, and a long list of scripts that I tweak on weekends. Looking ahead, I’m diving deeper into AI model threats and cloud native defenses. If you’re building something new and want a second pair of eyes—or just want to chat over coffee ☕—let’s connect!

Location

Pune Division

Work experience

Software Engineer at Zensar Technologies, Sep 2022 - Jun 2024 · 1 yr 10 mos, Pune District, Maharashtra, India, · Assessed 100+ Web, API, Mobile, Cloud, and AI applications, identifying and validating 30+ vulnerabilities across critical business environments · Discovered and verified OWASP Top 10 vulnerabilities including SQLi, XSS, CSRF, SSRF, CORS, and Security Misconfigurations, reducing application security risks by 30% · Conducted API security assessments using Burp Suite Professional and Postman, identifying BOLA, BFLA, Mass Assignment, Authentication flaws, and Cryptographic weaknesses across REST APIs · Performed Android application security testing using Frida, Jadx, Objection, ADB Shell, and Genymotion, uncovering insecure storage, code tampering, weak encryption, and credential exposure issues · Executed cloud security reviews using ScoutSuite, Prowler, TruffleHog, and Git, identifying IAM weaknesses, exposed S3 buckets, EC2 misconfigurations, and data protection gaps · Evaluated AI-powered applications for Prompt Injection, Sensitive Information Disclosure, Model Poisoning, System Prompt Leakage, and Improper Output Handling vulnerabilities · Delivered 100+ VAPT reports, collaborated with developers during remediation, and achieved 95% successful vulnerability closure verification through re-testing activities

Junior Software Engineer at Zensar Technologies, Sep 2021 - Sep 2022 · 1 yr 1 mo, Pune Division, Maharashtra, India, • Ensured reliability of Cisco’s DasCODE PaaS by administering Linux servers, scheduling weekly backups and log rotation, enabling analysis of 10K+ system logs for proactive error detection. • Monitored DasCODE platform telemetry using Prometheus and Grafana, identified recurring issues, and presented findings in Agile Scrum meetings, reducing average root-cause resolution time by 30%. • Containerized Cisco DasCODE applications with Docker multi-stage builds, reducing container image size by 40% to improve deployment efficiency and optimize storage utilization. • Streamlined CI/CD pipelines in Jenkins and Terraform for Cisco’s Java-based PaaS, automating deployments and improving release cadence. • Enhanced observability by integrating Grafana dashboards with Cassandra telemetry data, improving monitoring visibility and reducing mean time to repair (MTTR) by 25%.

Education

Bachelor's degree, Information Technology, JSPM's Rajarshi Shahu College of Engineering

Shri Sant Gajanan Maharaj English School,Shegaon,Buldhana-444203