Headline

SECURITY ANALYST At Capgemini | AppSec | VAPT | Threat modeling | DAST | Penetration testing

About

I’ve learned that even "perfect code" can't save a system if the underlying design is flawed. While automated scanners are great at catching syntax errors, they often miss the missing logic and improper design that a human eye can spot. With nearly 2 years of experience in grey-box penetration testing and DAST, I help developers see their code through the eyes of an attacker How I help teams build better * OWASP-Driven Testing: I don't just "scan" for bugs; I conduct thorough assessments based on OWASP Top 10 standards to find the vulnerabilities that matter most. * Logic-Focused Testing: I specialize in finding those tricky business logic issues and authorization flaws that stem from how a system is put together, not just how it’s coded. * Quality Over Quantity: I use Burp Suite Pro for deep-dive manual validation to clear out false positives, giving remediation teams 100% accurate data they can actually use. * Smart Prioritization: By bringing threat modeling into the SDLC, I help teams focus their energy on high-impact risks rather than getting bogged down by minor bugs. * A collaborative Approach: I don't just hand over a list of problems; I partner with cross-functional teams to explain the why behind design threats and help turn findings into real architectural wins.

Location

Bengaluru

Work experience

Software Analyst at Capgemini, Jul 2024 - Present · 1 yr 11 mos, India, * Performed DAST and grey‑box application security testing using OWASP ZAP, Burp Suite Pro, Nmap, and other security tools. * Validated vulnerabilities manually, reduced false positives, and followed OWASP guidelines for assessing auth, input validation, and session management issues. * Managed vulnerability documentation, triage, CVSS scoring, and supported audit requirements through exception and false‑positive reviews. * Leveraged tools like Agent Zero to enhance testing workflows and continuously improved methodologies. * Collaborated with developers and cross‑functional teams for issue walkthroughs, retesting, and secure SDLC practices. * Strengthened offensive security skills through PortSwigger labs and continuous learning of new tools and AppSec concepts.

Trainee at Pentagon Space, Aug 2023 - Jun 2024 · 11 mos, India

Intern at GOVERNMENT TOOL ROOM AND TRAINING CENTRE, Apr 2022 - Jun 2022 · 3 mos, India

Education

Bachelor of Engineering - BE, Electronics and Communications Engineering, Visvesvaraya Technological University