Headline

Sr. Consultant@UltraViolet Cyber | CRTP | CEH |Application Security | Product & AI Security | Penetration Testing | All OWASP top 10

About

Security Consultant with 5+ years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT) across Web, Mobile, API, and Source Code layers. Skilled in identifying and remediating complex security flaws through Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Source Code Review (manual amp; automated), and Software Composition Analysis (SCA). Proficient in tools such as Burp Suite Pro, Frida, ADB, BlackDuck, Polaris, Stride, Postman, and Swagger UI. Experienced in conducting Android Penetration Testing, API Security Testing, and implementing secure coding practices through detailed code-level analysis.Strong background in Linux environments, and well-versed with secure development practices that align with DevSecOps pipelines. Passionate about bridging the gap between development and security teams to build secure, resilient products.

Location

Bengaluru

AI stack

claude code

claude

deepseek

gemini

notion

Work experience

Professional Services Consulting, Sr Consultant at UltraViolet Cyber, Mar 2025 - Present · 1 yr 8 mos, Bengaluru, Karnataka, India

Application Security Consultant at UltraViolet Cyber (BlackDuck / Synopsys Inc.), Jul 2022 - Present · 4 yrs 4 mos, •Delivered 150+ penetration testing engagements (web, REST/GraphQL API, iOS & Android) for Banking, FinTech, e-Commerce & Healthcare clients; identified 200+ vulnerabilities across OWASP Top 10 and API Security Top 10. •Conducted black/grey/white-box assessments using PTES, OWASP Testing Guide, CVSS v3.1 scoring, and CWE classification for risk-based prioritization. •Discovered 15+ critical/high findings: HTTP Request Smuggling (CVSS 9.8), Auth PIN Bypass (CVSS 8.1), Mass ATO via IDOR/BOLA, DOM XSS via Prototype Pollution (CWE-79). •Performed Assessments for Top-rated client such as Bank Of Palestine, AARP, RSM US, Wex, Rocket Software, Brinks, Deloitte, Intuit, J.P Morgan Chase and More. •Authored CVSS-scored vulnerability reports with business impact and remediation guidance; mentored junior consultants on AppSec methodology.

CTF Player at Hack The Box, Apr 2022 - Present · 4 yrs 7 mos

CTF Player at TryHackMe, Mar 2022 - Present · 4 yrs 8 mos

Education

Bachelor of Computer Applications, Computer/Information Technology Administration and Management, IEC UNIVERSITY

High School Diploma, E-Commerce/Electronic Commerce, Rashtra Shakti Vidhyalaya