Headline

Penetration Tester | Web App & Network VAPT | Government Projects | ISO 27001 | CEH

About

Penetration tester with 8 months of paid, hands-on experience conducting 100+ manual VAPT engagements across government and enterprise web applications for a CERT-In empanelled organization. I've delivered end-to-end security assessments for eight high-profile Government of India organizations — IRFC, DGQA, DMRC, UPRVUNL, IREDA, NBEMS, RajCOMP, and CISF — spanning defence, transport, energy, healthcare, finance, and statistical governance sectors. Every engagement included full reporting: CWE classification, CVSS v3.1 scoring, PoC documentation, and remediation coordination aligned to OWASP Top 10, CERT-In guidelines, and ISO 27001. Beyond web app VAPT, I've worked on Android APK security audits, network infrastructure assessments (Nessus, Nmap), Active Directory attack vectors (LLMNR/NBT-NS poisoning, NTLM relay), and CERT-In compliance auditing. I hold an ISO/IEC 27001:2022 Lead Auditor certification and a Post Graduate Diploma in Cyber Security & Law from Delhi University (84.25%). Currently pursuing CEH and OSCP while building in DevSecOps and AI security. Actively seeking roles in Penetration Testing, Application Security, or GRC in Delhi NCR.

Location

New Delhi

Work experience

Trainee (Government Vertical) at ANB Solutions Pvt. Ltd, Aug 2025 - Apr 2026 · 9 mos, Jaipur, Rajasthan, India, Conducted 100+ manual web application VAPT engagements for Government of India organizations using black-box and grey-box testing methodologies. Identified critical vulnerabilities including SQL Injection, XSS, IDOR, Broken Authentication, and Business Logic Flaws across high-compliance government portals. Delivered 50+ VAPT reports with CWE classification, CVSS v3.1 scoring, PoC documentation, and remediation strategies aligned to OWASP Top 10 and CERT-In guidelines. Performed 10 + network infrastructure assessments using Nessus and Nmap, identifying misconfigured services and unpatched systems across government IT environments. Conducted post-remediation revalidation testing and tracked full vulnerability lifecycle across concurrent client engagements. Key Clients: IRFC · DGQA · DMRC · UPRVUNL · IREDA · NBEMS · RajCOMP · CISF · MoSPI

Gurugram Police Internship (GPCSSI 2025) at Haryana Police, Jun 2025 - Jul 2025 · 2 mos, Gurugram, Haryana, India, Gained hands-on exposure to cybercrime investigation workflows, digital evidence handling, and IT Act 2000 enforcement procedures.

Penetration Tester Intern at Hacktify Cyber Security, Feb 2025 - Mar 2025 · 2 mos, Remote, Performed web application penetration testing on real-world targets, identifying and documenting vulnerabilities with remediation recommendations.

Education

Postgraduate Degree Diploma, Cyber Security And Law, Shaheed sukhdev college of business studies

Bachelor of Science - B.Sc (H), Computer Science, Delhi University