Headline

🔐 Penetration Tester | Web, Network API Security | AI Automation | Enterprise Reporting | 3+ Yrs Experience | Open-Source Security Tools Expert ||

About

Please Visit: https://roomfinder.run.place/ As a seasoned penetration tester and security researcher, I have 3 years of experience identifying and addressing security vulnerabilities in a variety of digital environments, such as servers, networks, and web applications. My knowledge of VAPT methodologies, combined with proficiency in tools such as Burp Suite and Metasploit, allows me to effectively lead and collaborate on the implementation of robust security solutions. I have successfully led application security assessments, managed vulnerability mitigation processes, and delivered educational seminars to encourage secure development practices. My initiatives resulted in a significant reduction in security incidents and an improved security posture. My technical skills include Bash, PowerShell, Python, and a variety of security tools. I have extensive experience conducting red team assessments, reviewing source code, and managing security configurations. With a strong desire to learn new things, I have done security research and helped develop open-source tools. My educational background includes a bachelor's degree in computer applications and cyber security, and I am eager to expand my knowledge and skills in the rapidly evolving field of cybersecurity.

Location

Bengaluru

AI stack

antigravity

claude code

deepseek

hermes agent

notion

ollama

Work experience

Senior Security Consultant - 2 at Impelsys, Apr 2026 - Present · 6 mos, Bengaluru, Karnataka, India, ▪ Reported 40+ critical vulnerabilities within the first month across two enterprise products, immediately demonstrating high impact and value. ▪ Identified a Critical Remote Code Execution (RCE) vulnerability via unrestricted file upload, achieving complete compromise of AWS EC2 infrastructure. ▪ Discovered a severe Cloud Security Misconfiguration exposing full AWS environment access and sensitive business data. ▪ Delivered independent end-to-end penetration testing across web applications, REST/GraphQL APIs, cloud environments, and enterprise platforms. ▪ Automated report generation, evidence collection, and testing workflows, improving assessment turnaround efficiency significantly. ▪ Collaborated with engineering and product teams to validate remediations and strengthen overall security posture. ▪ Received formal leadership appreciation for identifying high-impact vulnerabilities with critical business risk.

Security Consultant at Ampcus Cyber, Mar 2025 - Apr 2026 · 1 yr 2 mos, ▪ Embedded for 5 months at a leading NBFC client to strengthen enterprise application security and build secure development practices from the ground up. ▪ Reviewed application security architecture; identified multiple authentication, authorization, and business logic bypass techniques. ▪ Conducted secure source code reviews and provided actionable, developer-friendly remediation guidance. ▪ Designed and developed a custom security automation platform for the client's LMS portal. ▪ Implemented Secure SDLC programs from scratch at multiple client organizations, covering threat modeling, security gates, and developer training. ▪ Integrated SonarQube, Snyk, Aikido, SAST, DAST, SCA, and SBOM generation into CI/CD pipelines for continuous security coverage. ▪ Conducted cloud security assessments of AWS environments: identified IAM misconfigurations, privilege escalation paths, and exposed services

Cyber Security Analyst at Ampcus Cyber, Jul 2024 - Mar 2025 · 9 mos, ▪ Led end-to-end penetration tests across web applications, APIs, cloud infrastructure, mobile applications, and containerized environments. ▪ Developed custom Python and Bash tools for reconnaissance, exploitation validation, and automated report generation. ▪ Implemented Wazuh SIEM for centralized log management, monitoring, and threat detection. ▪ Produced executive and technical security reports with prioritized, actionable remediation guidance. ▪ Successfully cleared Round 1 and Round 2 of the CERT-In Security Assessment Program.

Penetration Tester at TeamLease Regtech Pvt. Ltd, Apr 2023 - Jun 2024 · 1 yr 3 mos, Pune District, Maharashtra, India, 1. Lead application security assessments on the web, mobile devices (Android), hosts, networks, and servers, identifying and mitigating 20+ critical vulnerabilities. 2. Implemented Wazhu, Sonarqube, and DefectDojo to streamline vulnerability management and improve security outcomes, resulting in an 80% reduction in security incidents. 3. I oversaw the implementation of Active Directory and user configuration on all laptops within the organization for a team of three members. 4. Spearheaded the successful VAPT of our internal applications, Active Directory, and servers, enhancing our overall security posture. 5. We designed and implemented a PfSense firewall on Azure to improve the security and reliability of all our servers. 6. Delivered educational seminars on secure development coding and information security awareness to employees, fostering a culture of security within the organization. 7. Strong knowledge of Bash, Powershell, Python, and various methods for hardening services, servers,Active Directory, and firewalls. 8. We successfully performed both manual and automated source code reviews for our SaaS products (both Web and Android applications) to ensure code quality and security.

Education

BCA, Computer Science, amity University

High School Diploma, Mathematics and Computer Science, Baradongal RN Institution

Public links

github: https://github.com/xgt6op01