Application Security Engineer @Bank | Web, API & Mobile | RBI Cybersecurity Guidelines | PCI-DSS | Exploring AI & LLM Security | OSCP Candidate | Part Time Mentor

Bengaluru

United Kingdom

Faridabad

Bengaluru, Karnataka, India

Gurugram, Haryana, India






Master of Science, Electrical, Electronics and Communications Engineering
Utkal University
Masters in Cybersecurity, CyberSecurity
Dataspace Academy
Join Mohammad and 10k+ other professionals on
Tal is the app where bosses meet engineers & builders directly, without middlemen
Download Tal BossApplication Security Engineer @Bank | Web, API & Mobile | RBI Cybersecurity Guidelines | PCI-DSS | Exploring AI & LLM Security | OSCP Candidate | Part Time Mentor
As an Information Security Consultant with hands-on experience across Application, Network and AI security, I am passionate about safeguarding organizations from ever-evolving cyber threats. My journey spans vulnerability assessment and penetration testing (VAPT), red teaming, and security consulting for sectors including healthcare and banking. Certified as an Ethical Hacker (CEHv12), I have successfully led security engagements that identified and remediated critical vulnerabilities before deployment, ensuring zero re-bugs and positive client outcomes. I excel in translating complex technical findings into actionable insights for both technical and non-technical stakeholders, helping organizations foster a proactive security culture. My toolkit includes Burp Suite, Nessus, Metasploit, Wireshark, and advanced cloud security solutions. With a track record of training teams and reducing phishing risks, I am committed to continuous learning and driving results in the cybersecurity space. I am eager to connect with professionals and organizations who share my mission to make the digital world safer for everyone.
Greater Bengaluru Area
claude code
claude
deepmind
deepseek
gemini
Senior Application Security Engineer at Secureinteli Technologies, Jun 2026 - Present · 5 mos, Bengaluru, • Led a comprehensive penetration testing and firewall audit for a prominent small finance bank, assessing vulnerabilities across multiple environments. • Conducted a detailed white-box source code security review of a Java/Spring Boot service, identifying critical security issues. • Delivered assessments in compliance with Aadhaar Act 2016 and UIDAI guidelines, enhancing the security posture of the client.
API Security Engineer at AethexAI, Apr 2026 - Jun 2026 · 3 mos, United Kingdom
Application Security Consultant at Skillteaser Technologies, Oct 2025 - Jun 2026 · 9 mos, Faridabad, - Served as the primary security tester for an organization that both builds in-house products and delivers security services — responsible for testing every product Skillteaser developed, working closely with developers throughout. - Conducted source code security reviews, mobile application security testing, and API security testing across the company's product suite. - Performed dedicated security assessments on NBFC products built for a client, applying financial-sector security practices given the regulatory sensitivity of NBFC data. - Used a mixed SAST/DAST toolchain — SonarQube, Checkmarx, and HCL AppScan for source code and static analysis; Qualys for vulnerability scanning; OWASP ZAP and Postman for API and dynamic testing. - Sat closely with development teams to validate findings in context and speed up remediation cycles, rather than working as a purely external tester.
Information Security Analyst at Arridae Infosec, Apr 2024 - Oct 2025 · 1 yr 7 mos, Bengaluru, Karnataka, India, - Led 50+ VAPT assignments across diverse industries, identifying and remediating critical vulnerabilities pre-launch. - Utilized Nessus, Burp Suite, Wireshark, and Metasploit for comprehensive security assessments. - Developed and delivered company-wide security awareness training, reducing phishing click rates by 50%. - Successfully managed high-priority banking client engagement, delivering on time with zero post-delivery issues. - Simplified complex technical vulnerabilities for business stakeholders, enhancing security understanding across teams.
Security Analyst at R1 RCM, Aug 2022 - Mar 2023 · 8 mos, Gurugram, Haryana, India, - Performed VAPT on healthcare app using Burp Suite, Nmap, and OWASP Zap. - Identified and remediated all critical vulnerabilities before production deployment. - Used MS Sentinel and Crowdstrike to monitor threats in real-time environment. - Analyzed DLP alerts and tuned rules to protect sensitive patient data. - Documented findings, created runbooks, and ensured HIPAA compliance throughout project lifecycle.
Master of Science, Electrical, Electronics and Communications Engineering, Utkal University
Masters in Cybersecurity, CyberSecurity, Dataspace Academy