Vidhan Thakur on Tal
Headline
Security Engineer @intelliroot | VAPT, API & Network Security & AI/LLM Security | Bug Bounty Hall of Fame @ Deutsche Telekom, Stanford, Tata Motors | CEH v13, CNSP
About
I'm a Junior Security Engineer and Security Researcher specializing in Web Application, API, and Network Security. I perform Vulnerability Assessment and Penetration Testing (VAPT) across web, API, mobile, and network surfaces — identifying real-world security weaknesses, validating impact with proof-of-concept exploits, and delivering CERT-In aligned reports with actionable remediation guidance for developers and stakeholders. Core Expertise: • VAPT — Web, API, Mobile & Network Penetration Testing • Secure Code Review, SAST & Software Composition Analysis (SCA) • Secure SDLC, Shift-Left Security & Threat Modeling (STRIDE) • DevSecOps & CI/CD Security (Semgrep custom rules, pipeline hardening) • OWASP Top 10 & OWASP API Top 10 testing • AI/LLM Security — prompt injection identification in AI-integrated applications Outside client engagements, I research independently. My disclosures include a two-time Hall of Fame recognition from Deutsche Telekom, along with reported vulnerabilities at Stanford University, Max Healthcare, and Tata Motors — spanning authentication bypass, HTML injection, session flaws, and information disclosure. I'm currently building toward Product Security Engineering — bridging offensive testing experience with Secure SDLC, threat modeling, and AppSec program design at scale. Working in security, compliance, or building products you want tested properly? Let's connect.
AI stack
claude code
claude
openai
Work experience
Jr. Security Engineer at Intelliroot, Feb 2025 - Present · 1 y 7 mo, Bengaluru, • Conduct Web, API, Mobile, and Network security assessments across client engagements, identifying critical vulnerabilities and business logic flaws. • Perform source code review, SAST, and SCA to catch insecure coding patterns and vulnerable dependencies before release. • Partner with development teams on Secure SDLC and Shift-Left Security, remediating issues early in the lifecycle. • Build PoC exploits demonstrating real-world impact of authentication, authorization, and session vulnerabilities. • Author VAPT and CERT-In compliant reports with risk scoring and remediation guidance for stakeholders.
Cyber Security Intern at Senselearner Technologies Pvt. Ltd., Sep 2023 - Oct 2023 · 2 mos, Remote, It is a Virtual internship Take on practical cyber security assignments to develop knowledge and skills. Gain technical expertise in areas like incident response, penetration testing, vulnerability assessments, and security tools.
Education
Bachelor of Engineering - BE, Computer Science and Engineering, Prof. Ram Meghe Institute of Technology & Research Badnera Rly.
High School Diploma, Computer Science, Sri Chaitanya College of Education
Public links
vidhan-thakur-portfolio.vercel.app: https://vidhan-thakur-portfolio.vercel.app/
github: https://github.com/VidhanThakur17
medium: https://medium.com/@vidhanthakur173
