•Goal-oriented professional with 6 years of experience as Security Analyst
• Conducted VAPT & SAST; reviewed compliance with the information security policy and procedures and ensured information security.
• Investigated, determined causes, suggested appropriate remedial actions
• Performed Web, Mobile Application Security Testing/analysis & recommended mitigation through appropriate controls
• Experienced in Vulnerability Assessment and Penetration Testing (Manual & Automated), Web application vulnerability assessment, Source Code Review
•Conducting security code review assessment of web applications
• Contributing in Web Application Vulnerability Assessment & Penetration Testing using proxy tool Burp Suite.
• Contributing in API Penetration Testing using proxy tool Burp Suite and Postman.
• Understanding application level vulnerabilities such as XSS, SQL Injection, CSRF, Authentication bypass, Authentication flaws, and so on
• Participating in security assessment of online applications to identify the vulnerabilities in different categories such as input & data validation, authentication, authorization