Aditya Raj

I’m an Application Security Engineer with 1.5+ years of experience assessing Web, API, and SAST security while also specializing in AI/LLM security testing. I focus on vulnerability assessment, applied cryptography, and building secure applications that reduce real-world risk.

In my current role, I perform Black Box and Grey Box assessments across banking, e-commerce, retail, CMS, and enterprise platforms. I’ve identified critical and high-severity issues such as authentication bypasses, IDOR, business logic flaws, and injection vulnerabilities, and I deliver proof-of-concept exploits with actionable remediation for development and DevOps teams.

I also lead deeper technical work like source code review—on a .NET cash logistics application, I mapped 7 vulnerabilities (including IDOR on PIN reset, CSRF, plaintext credential storage, and JavaScript injection) to CWE and severity for pentest reporting. Beyond classic app security, I investigate risks in LLM-integrated systems such as prompt injection, insecure output handling, and model abuse, and I automate testing with Burp Suite Pro, Postman, and custom Python tooling.