At PWC-TPR, I led end-to-end application security assessments for web, mobile, API, and cloud-native applications, identifying critical and high-risk vulnerabilities before production. I also integrated security controls into the Secure SDLC, reducing security defects reaching production by 60%.
I conducted threat modeling for microservices, APIs, and GenAI applications, identifying more than 100 attack scenarios. I also performed AI red teaming of LLM-based applications, uncovering issues including prompt injection, jailbreaks, sensitive data leakage, and insecure tool usage.
At Jio Platforms Limited, I performed security assessments and manual penetration testing for web, mobile, and API applications. My findings included IDOR, SSRF, authentication bypass, SQL injection, stored XSS, and access control issues.
Across both roles, I developed Python automation for security testing and reporting, and worked with engineering teams on remediation. My experience also includes secure code reviews, threat modeling, and integrating SAST, DAST, SCA, secret scanning, and container security into CI/CD pipelines.
