Open to opportunities

Abhishek User

@abhishekuser32

CEH v13-certified Penetration Tester with 3+ years of experience in web application VAPT and OWASP Top 10 vulnerability assessment at Tata Consultancy

India

Message

What I'm looking for

I’m looking for a Penetration Tester/VAPT Consultant role where I can run black-, grey-, and white-box assessments, produce CVSS-scored PoCs, and partner with DevOps to retest and embed Secure SDLC across teams.

I’m a CEH v13-certified Penetration Tester with 3+ years of hands-on experience in web application VAPT, SAST/DAST, and OWASP Top 10 vulnerability assessment across enterprise production environments at Tata Consultancy Services.

I conduct black-box, grey-box, and white-box penetration tests across 10+ web applications, uncovering SQL Injection, XSS, CSRF, IDOR, SSRF, and related issues. I translate findings into CVSS v3.1-scored Proof-of-Concept exploit reports with root cause analysis, business impact, and step-by-step remediation guidance for both technical and non-technical stakeholders.

I also strengthen outcomes through full remediation cycles—collaborating with development and DevOps teams, retesting fixes, and documenting recurring vulnerability patterns to support Secure SDLC adoption.

Experience

Work history, roles, and key accomplishments

Current

Penetration Tester

Current

Tata Consultancy Services

Jun 2023 - Present (3 years 1 month)

Conducted black-, grey-, and white-box penetration tests across 10+ web applications, finding OWASP Top 10 issues including SQL injection, XSS, CSRF, IDOR, SSRF, and authentication bypass. Performed Fortify/Burp Suite Pro/OWASP ZAP SAST and DAST assessments, authored CVSS v3.1-scored PoC exploit and remediation reports, and retested fixes with development and DevOps teams.

Web Application Testing SAST DAST Vulnerability Assessment Penetration Testing Burp suite OWASP ZAP Fortify OWASP Top 10 OWASP CVSS SQL Injection XSS CSRF IDOR SSRF Secure SDLC

Current

System Engineer - Data Analyst

Current

Tata Consultancy Services

Oct 2022 - Present (3 years 9 months)

Designed SAP HANA Calculation Views and SAP BODS ETL pipelines to support security metrics reporting and compliance dashboards. Built and maintained QlikSense dashboards and automated data extraction/reporting using PowerShell and the Qlik CLI for security and operations stakeholders.

SAP HANA Calculation Views ETL Qlik PowerShell Data Extraction Security Metrics