Headline

Cybersecurity Consultant | VAPT & Application Security Specialist | Web, API, Network and Mobile Testing

About

I am a Cybersecurity Consultant with 3+ years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), currently working at ProTechmanize Solutions. I specialize in delivering end-to-end offensive security and application security assessments across Web Applications, APIs, Networks, Mobile Applications (Android), Thick Clients, and Databases, helping organizations identify and mitigate real-world security risks. My expertise includes manual and automated penetration testing, business logic testing, vulnerability validation, secure architecture assessments across on-premise and cloud environments, and providing risk-based remediation aligned with OWASP Top 10, OWASP API Top 10, SANS Top 25, CWE, CVSS, and Secure SDLC practices. I actively collaborate with international clients across complete assessment lifecycles, including scope review, SOW analysis, access validation, security testing, detailed reporting, and post-assessment walkthroughs with both technical and non-technical stakeholders. I have strong experience identifying vulnerabilities such as SQL Injection, XSS, IDOR, Broken Authentication, Authorization Flaws, Business Logic Issues, SSRF, XXE, RCE, File Upload Vulnerabilities, Security Misconfigurations, and Sensitive Data Exposure. 🔧 Tools & Technologies Burp Suite Pro • Kali Linux • Nmap • Nessus • Qualys • Metasploit • OWASP ZAP • SQLMap • Nikto • DIRB • Wireshark • Postman • Swagger API • MobSF • SSL/TLS Testing 🔐 Core Expertise • Vulnerability Assessment & Penetration Testing (VAPT) • Web & API Security Testing (OAuth2 / JWT) • Network Penetration Testing (Internal & External) • Mobile Application Security (Android) • Thick Client & Database Security Testing • Secure Architecture Review (On-Prem & Cloud) • Vulnerability Management & Remediation Consulting I am passionate about ethical hacking, offensive security, and continuous skill development, with a strong focus on delivering high-quality security assessments that strengthen organizational security posture. 🚀 Open to challenging cybersecurity opportunities, collaborations, and knowledge sharing within the security community.

Location

Pune City

Work experience

Cyber Security Consultant at ProTechmanize, Jan 2025 - Present · 1 yr 6 mos, London Area, United Kingdom, • Deliver end-to-end Vulnerability Assessment and Penetration Testing (VAPT) for international clients across web, API, network, mobile (Android), thick client, and database environments. • Conduct secure architecture assessments across on-premise and cloud environments to identify design-level security gaps. • Perform manual and automated penetration testing aligned with OWASP Top 10, OWASP API Top 10, CWE, and CVSS standards. • Identify and exploit vulnerabilities including SQL Injection, XSS, IDOR, SSRF, RCE, Authentication & Authorization flaws, and Business Logic vulnerabilities. • Conduct risk-based vulnerability validation, false-positive analysis, impact assessment, and remediation prioritization. • Prepare detailed technical VAPT reports including PoC, severity ratings, and mitigation strategies. • Participate in client walkthrough and closure calls, explaining findings to both technical and non-technical stakeholders. • Collaborate with development and security teams to align remediation with ISO 27001, PCI-DSS, HIPAA, and secure SDLC practices.

Internship Trainee at AICTE, May 2023 - Jul 2023 · 3 mos, Remote

Education

Bachelor of Technology - BTech, Computer Engineering, Ajeenkya DY Patil University

Diploma of Education, Computer Engineering, Ajeenkya DY Patil University