Soumya Ranjan Parida profile photo 1 on Tal

Soumya Ranjan Parida

QA Engineer @ Evaratus (formerly Scaler AI Labs) | Application Security & VAPT | OT/ICS Security Enthusiast | Manual Testing | Burp Suite • OWASP Top 10 | CEH • CAP • CNSP |

Bengaluru

1+ year of work experience

Scaler AI Labs
Jun 20266 mosPresent

Bengaluru, Karnataka, India

•Founding member of the QA team, owning manual quality assurance for high-fidelity RL environments used to train and evaluate frontier AI models •Test complex, multi-step enterprise workflows end to end so each web application clone behaves exactly like the original product •Design and run detailed test cases covering functional, UI/UX, workflow, input-validation, regression and exploratory testing •Do pixel-level UI checks of layout, navigation, states and visual consistency •Find edge-case defects such as empty states, invalid inputs, interrupted flows and permission boundaries •Run smoke, sanity and regression cycles on every new build to catch issues early •Write clear, reproducible bug reports with steps to reproduce, expected vs. actual results, severity and priority •Track defects through their full lifecycle and retest fixes with developers until environments are release-ready •Give final QA sign-off before environments are delivered •Bring a security tester's mindset, checking for weak input validation, broken access flows and unexpected states
Scaler AI Labs
Dec 20257 mosJun 2026

•Manually tested RL environments built on multiple enterprise web application clones •Designed and executed test cases based on requirements, user scenarios and real-world application behaviour •Ran functional, UI, workflow and exploratory testing to find defects across application modules •Reported and tracked defects, working with developers to get them resolved on time •Retested fixes and ran regression checks to confirm nothing else broke
InstaSafe
Jul 20254 mosOct 2025

Bengaluru, Karnataka, India

• Deployed and tuned a ModSecurity WAF with custom rulesets, reducing false positives by 25% • Built a Python load-testing framework that simulated 10,000+ concurrent requests • Ran SAST/DAST assessments with Burp Suite and OWASP ZAP, and revalidated 50+ findings with CVSS scoring
TATA Advanced Systems Limited
Mar 20254 mosJun 2025

Bengaluru, Karnataka, India

• Gained exposure to risk assessment methodologies to identify security risks in enterprise networks. • Deployed and configured Intrusion Detection Systems (IDS) in internal networks under supervision. • Compiled security incident reports for malware and vulnerability analysis.
Blue Planet Infosolutions Pvt. Ltd., India
Jul 20217 mosJan 2022

India

• Performed web application penetration testing using Burp Suite, OWASP ZAP, and Nmap. • Reported XSS, SQLi, OAuth misconfigurations, and sensitive data exposure. • Supported network vulnerability scans and system-level risk assessments.

Soumya’s AI Stack

anthropic apis
anthropic apis
claude code
claude code
claude
claude
ollama
ollama
Blackbox AI
Blackbox AI
tl;dv
tl;dv

Education

The Oxford College of Education, Bengaluru

Bachelor's degree, Computer applications

The Oxford College of Education, Bengaluru

20223 yrs2025

Diploma of Education, Computer Science

RJS Polytechnic

20183 yrs2021

Join Soumya and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Soumya Ranjan Parida on Tal

Headline

QA Engineer @ Evaratus (formerly Scaler AI Labs) | Application Security & VAPT | OT/ICS Security Enthusiast | Manual Testing | Burp Suite • OWASP Top 10 | CEH • CAP • CNSP |

About

I find what breaks before users do, whether it's a bug hidden in a workflow or a vulnerability in a web application. I'm a Founding QA Engineer at Evaratus (formerly Scaler AI Labs). I test realistic enterprise software environments that are used to train and evaluate frontier AI models, and I make sure every workflow, screen and edge case behaves exactly like the real product before it goes live. Before Evaratus, I worked in cybersecurity at InstaSafe, Tata Advanced Systems and Blue Planet InfoSolutions. That background shapes how I test: I don't stop at "does it work?", I keep going to "how can it break?" Highlights: ▸ Tuned a ModSecurity WAF with custom rulesets, cutting false positives by 25% without losing detection accuracy ▸ Revalidated 50+ vulnerability findings with CVSS-based severity scoring ▸ Found XSS, SQLi and OAuth misconfigurations during web application pentests ▸ Reported 20+ validated bug bounty findings ▸ Write about web security on Medium, most recently on HTTP Parameter Pollution Beyond application security, I'm building my knowledge of OT/ICS security: how industrial control systems, SCADA and PLCs work, and why securing them takes a different approach than securing IT. Bridging the IT–OT security gap is where I want to grow next. What I work with: 🔹 QA: manual, functional, UI/UX, regression and exploratory testing; test case design; defect tracking 🔹 Security: OWASP Top 10, VAPT, CVSS, Burp Suite, OWASP ZAP, Nessus, SQLMap, Nmap 🔹 OT/ICS (foundational): ICS/SCADA architecture, industrial protocols, IT–OT security 🔹 Tech: Python, Java, SQL, Linux, Docker, Git Certifications: CAP, CNSP, CCEP, Fortinet NSE 1 & 2. I'm currently working toward my CEH. Always happy to talk security, testing or OT. Feel free to message me or email paridas909@gmail.com.

Location

Bengaluru

AI stack

anthropic apis

claude code

claude

ollama

Blackbox AI

tl;dv

Work experience

Founding QA engineer at Scaler AI Labs, Jun 2026 - Present · 6 mos, Bengaluru, Karnataka, India, •Founding member of the QA team, owning manual quality assurance for high-fidelity RL environments used to train and evaluate frontier AI models •Test complex, multi-step enterprise workflows end to end so each web application clone behaves exactly like the original product •Design and run detailed test cases covering functional, UI/UX, workflow, input-validation, regression and exploratory testing •Do pixel-level UI checks of layout, navigation, states and visual consistency •Find edge-case defects such as empty states, invalid inputs, interrupted flows and permission boundaries •Run smoke, sanity and regression cycles on every new build to catch issues early •Write clear, reproducible bug reports with steps to reproduce, expected vs. actual results, severity and priority •Track defects through their full lifecycle and retest fixes with developers until environments are release-ready •Give final QA sign-off before environments are delivered •Bring a security tester's mindset, checking for weak input validation, broken access flows and unexpected states

Quality Assurance Intern at Scaler AI Labs, Dec 2025 - Jun 2026 · 7 mos, •Manually tested RL environments built on multiple enterprise web application clones •Designed and executed test cases based on requirements, user scenarios and real-world application behaviour •Ran functional, UI, workflow and exploratory testing to find defects across application modules •Reported and tracked defects, working with developers to get them resolved on time •Retested fixes and ran regression checks to confirm nothing else broke

Cybersecurity research intern at InstaSafe, Jul 2025 - Oct 2025 · 4 mos, Bengaluru, Karnataka, India, • Deployed and tuned a ModSecurity WAF with custom rulesets, reducing false positives by 25% • Built a Python load-testing framework that simulated 10,000+ concurrent requests • Ran SAST/DAST assessments with Burp Suite and OWASP ZAP, and revalidated 50+ findings with CVSS scoring

Project Trainee at TATA Advanced Systems Limited, Mar 2025 - Jun 2025 · 4 mos, Bengaluru, Karnataka, India, • Gained exposure to risk assessment methodologies to identify security risks in enterprise networks. • Deployed and configured Intrusion Detection Systems (IDS) in internal networks under supervision. • Compiled security incident reports for malware and vulnerability analysis.

Cybersecurity analyst intern at Blue Planet Infosolutions Pvt. Ltd., India, Jul 2021 - Jan 2022 · 7 mos, India, • Performed web application penetration testing using Burp Suite, OWASP ZAP, and Nmap. • Reported XSS, SQLi, OAuth misconfigurations, and sensitive data exposure. • Supported network vulnerability scans and system-level risk assessments.

Education

Bachelor's degree, Computer applications, The Oxford College of Education, Bengaluru

Diploma of Education, Computer Science, RJS Polytechnic