Andrew Resulto

Conducted internal and external VAPT for zero-trust web applications, network infrastructure, cloud security products, and APIs. Performed red/blue teaming with Windows and cloud infrastructure, including phishing simulations and AI/LLM adversarial testing (e.g., data poisoning, model evasion).

Performed internal and external VAPT for web applications, mobile apps (Android and iOS), and APIs. Produced client-ready reports with vulnerability risk ratings and remediation recommendations, and presented findings to technical and business stakeholders.

Performed security testing on cryptocurrency platforms, covering both web and mobile applications, to identify and exploit vulnerabilities. Delivered VAPT reports with impact analysis and remediation steps, and presented results to technical teams and business stakeholders.

Performed vulnerability assessment and penetration testing on internally developed web and mobile applications, identifying issues such as authentication flaws, injection attacks, and insecure data handling. Extended assessments to CI/CD pipelines to help integrate security controls across the software development lifecycle.

Supported continuous vulnerability management by scanning assets, identifying weaknesses, and coordinating remediation and risk mitigation. Managed security incident tickets end-to-end and investigated attack vectors and indicators of compromise to determine scope and impact.

Conducted regular vulnerability assessments and penetration testing on client environments to identify risks in web applications and network infrastructure. Delivered prioritized remediation recommendations and provided technical troubleshooting and IT support for hardware, software, and network-related issues.