Headline

Penetration Tester | VAPT | Cybersecurity Researcher | Python

About

I am a B.Sc. IT graduate (CGPA 8.5, 2025) from Mumbai with hands-on expertise in Vulnerability Assessment and Penetration Testing. I have practical experience identifying and exploiting OWASP Top 10 vulnerabilities including SQL Injection, XSS, IDOR, and CSRF in real-world environments. During my internship at HackVed, I performed black-box web application penetration testing across multiple targets, delivering CVSS-scored reports with clear remediation recommendations. I also completed a cybersecurity simulation with Tata Group focused on IAM design and compliance. Beyond internships, I actively sharpen my skills by completing offensive security labs on TryHackMe (10+ rooms), running a personal DVWA penetration testing lab, and building Python security tools including a custom network reconnaissance scanner. 🛠 Tools: Burp Suite · Nmap · Nessus · Metasploit · Wireshark · OWASP ZAP · SQLMap 📜 CEH v13 — EC-Council 📩 Open to VAPT, SOC Analyst, and Security Analyst roles. Feel free to reach out!

Location

Mumbai

Work experience

VAPT at HackVed, Jan 2026 - Apr 2026 · 4 mos, Madhya Pradesh, India, Executed black-box web application penetration testing across 5+ targets, mapping attack surfaces against OWASP Top 10 (2021) to systematically uncover critical exposures. ▪ Identified and exploited 10+ vulnerabilities including SQL Injection, Stored XSS, IDOR, CSRF, and broken authentication, documenting proof-of-concept (PoC) payloads for each finding. ▪ Leveraged Burp Suite for HTTP request/response manipulation and Nmap for host discovery, port scanning, and service enumeration across target environments. ▪ Delivered 5+ detailed penetration test reports with CVSS-scored findings, business risk impact assessments, and prioritized remediation roadmaps for client development teams

Security Researcher at Bugcrowd, Aug 2025 - Apr 2026 · 9 mos, Conducted vulnerability assessments and penetration testing on live web and mobile applications through Bugcrowd’s responsible disclosure and bug bounty programs. Identified and reported critical security vulnerabilities such as XSS, CSRF, IDOR, and SQL Injection. Performed reconnaissance, endpoint analysis, and parameter testing using tools like Burp Suite, Nmap, Subfinder, Httpx, Dirb/Dirbuster, and OWASP ZAP. Collaborated with security teams and program owners to ensure proper remediation and improve application security posture. Gained hands-on experience with OWASP Top 10 vulnerabilities, responsible disclosure, and coordinated vulnerability reporting.

Security Researcher at HackerOne, May 2025 - Apr 2026 · 1 yr, Mumbai, Maharashtra, India

Education

Bachelor of Science - BS, Information Technology, University of Mumbai