QA Engineer @ Evaratus (formerly Scaler AI Labs) | Application Security & VAPT | OT/ICS Security Enthusiast | Manual Testing | Burp Suite • OWASP Top 10 | CEH • CAP • CNSP |

Bengaluru, Karnataka, India


Bengaluru, Karnataka, India

Bengaluru, Karnataka, India

India






Bachelor's degree, Computer applications
The Oxford College of Education, Bengaluru
Diploma of Education, Computer Science
RJS Polytechnic
Join Soumya and 10k+ other professionals on
Tal is the app where bosses meet engineers & builders directly, without middlemen
Download Tal BossQA Engineer @ Evaratus (formerly Scaler AI Labs) | Application Security & VAPT | OT/ICS Security Enthusiast | Manual Testing | Burp Suite • OWASP Top 10 | CEH • CAP • CNSP |
I find what breaks before users do, whether it's a bug hidden in a workflow or a vulnerability in a web application. I'm a Founding QA Engineer at Evaratus (formerly Scaler AI Labs). I test realistic enterprise software environments that are used to train and evaluate frontier AI models, and I make sure every workflow, screen and edge case behaves exactly like the real product before it goes live. Before Evaratus, I worked in cybersecurity at InstaSafe, Tata Advanced Systems and Blue Planet InfoSolutions. That background shapes how I test: I don't stop at "does it work?", I keep going to "how can it break?" Highlights: ▸ Tuned a ModSecurity WAF with custom rulesets, cutting false positives by 25% without losing detection accuracy ▸ Revalidated 50+ vulnerability findings with CVSS-based severity scoring ▸ Found XSS, SQLi and OAuth misconfigurations during web application pentests ▸ Reported 20+ validated bug bounty findings ▸ Write about web security on Medium, most recently on HTTP Parameter Pollution Beyond application security, I'm building my knowledge of OT/ICS security: how industrial control systems, SCADA and PLCs work, and why securing them takes a different approach than securing IT. Bridging the IT–OT security gap is where I want to grow next. What I work with: 🔹 QA: manual, functional, UI/UX, regression and exploratory testing; test case design; defect tracking 🔹 Security: OWASP Top 10, VAPT, CVSS, Burp Suite, OWASP ZAP, Nessus, SQLMap, Nmap 🔹 OT/ICS (foundational): ICS/SCADA architecture, industrial protocols, IT–OT security 🔹 Tech: Python, Java, SQL, Linux, Docker, Git Certifications: CAP, CNSP, CCEP, Fortinet NSE 1 & 2. I'm currently working toward my CEH. Always happy to talk security, testing or OT. Feel free to message me or email paridas909@gmail.com.
Bengaluru
anthropic apis
claude code
claude
ollama
Blackbox AI
tl;dv
Founding QA engineer at Scaler AI Labs, Jun 2026 - Present · 6 mos, Bengaluru, Karnataka, India, •Founding member of the QA team, owning manual quality assurance for high-fidelity RL environments used to train and evaluate frontier AI models •Test complex, multi-step enterprise workflows end to end so each web application clone behaves exactly like the original product •Design and run detailed test cases covering functional, UI/UX, workflow, input-validation, regression and exploratory testing •Do pixel-level UI checks of layout, navigation, states and visual consistency •Find edge-case defects such as empty states, invalid inputs, interrupted flows and permission boundaries •Run smoke, sanity and regression cycles on every new build to catch issues early •Write clear, reproducible bug reports with steps to reproduce, expected vs. actual results, severity and priority •Track defects through their full lifecycle and retest fixes with developers until environments are release-ready •Give final QA sign-off before environments are delivered •Bring a security tester's mindset, checking for weak input validation, broken access flows and unexpected states
Quality Assurance Intern at Scaler AI Labs, Dec 2025 - Jun 2026 · 7 mos, •Manually tested RL environments built on multiple enterprise web application clones •Designed and executed test cases based on requirements, user scenarios and real-world application behaviour •Ran functional, UI, workflow and exploratory testing to find defects across application modules •Reported and tracked defects, working with developers to get them resolved on time •Retested fixes and ran regression checks to confirm nothing else broke
Cybersecurity research intern at InstaSafe, Jul 2025 - Oct 2025 · 4 mos, Bengaluru, Karnataka, India, • Deployed and tuned a ModSecurity WAF with custom rulesets, reducing false positives by 25% • Built a Python load-testing framework that simulated 10,000+ concurrent requests • Ran SAST/DAST assessments with Burp Suite and OWASP ZAP, and revalidated 50+ findings with CVSS scoring
Project Trainee at TATA Advanced Systems Limited, Mar 2025 - Jun 2025 · 4 mos, Bengaluru, Karnataka, India, • Gained exposure to risk assessment methodologies to identify security risks in enterprise networks. • Deployed and configured Intrusion Detection Systems (IDS) in internal networks under supervision. • Compiled security incident reports for malware and vulnerability analysis.
Cybersecurity analyst intern at Blue Planet Infosolutions Pvt. Ltd., India, Jul 2021 - Jan 2022 · 7 mos, India, • Performed web application penetration testing using Burp Suite, OWASP ZAP, and Nmap. • Reported XSS, SQLi, OAuth misconfigurations, and sensitive data exposure. • Supported network vulnerability scans and system-level risk assessments.
Bachelor's degree, Computer applications, The Oxford College of Education, Bengaluru
Diploma of Education, Computer Science, RJS Polytechnic