Headline

Penetration Tester | Web, API & Thick Client Security | VAPT | ex-KPMG

About

Penetration tester with a year of hands-on VAPT experience at KPMG, across web application, API (REST/GraphQL), thick client, and network security testing. I focus on finding and clearly documenting high-impact issues — broken access control, authentication flaws, business logic vulnerabilities, and infrastructure misconfigurations — and working with engineering teams to get them remediated. Comfortable across the full assessment lifecycle: scoping, manual and automated testing, exploitation, and risk-rated reporting. Core competencies: Web Application & API Security (REST/GraphQL) Thick Client & Network Penetration Testing Vulnerability Management & Reporting Custom tooling & automation (Python) Tools: Burp Suite, Postman, Wireshark, ProcMon, Nessus, Nmap, and more. I began in offensive security through bug bounty — reporting around 30 valid vulnerabilities to 10+ programs on HackerOne — and have since deepened my skills in Active Directory attack paths and Windows/Linux privilege escalation. Open to application security and penetration testing roles. Links: GitHub: https://github.com/spidy-idc HackerOne: https://hackerone.com/spidy_idc

Location

Bengaluru

AI stack

gemini

obsidian

openai

Work experience

VAPT (Vulnerability Assessment and Penetration Testing) Analyst at KPMG India, Jan 2024 - Jan 2025 · 1 yr 1 mo, Bengaluru, Karnataka, India

Education

Bachelor Of Computer Applications, Computer Science And Engineering, Sarala Birla University - SBU, Ranchi