Looking for a job

Devarshi Velani

@devarshivelani

Security Consultant at Gruve Technologies assessing web, API, mobile, and network security, with 20+ advisories on emerging vulnerabilities.

India

Message

At Gruve Technologies, I perform end-to-end VAPT across web applications, APIs, mobile apps, and network environments. I’ve contributed to assessments of 35+ applications and infrastructure components supporting secure production releases.

I also assess Android and iOS apps using static and dynamic analysis, and provide development teams with actionable security recommendations. My research has resulted in 20+ advisories on newly disclosed vulnerabilities, including technical analysis, impact assessment, and remediation guidance.

Previously, at Varutra Consulting, I performed assessments across web, mobile, API, thick-client, and network systems, and audited firewalls and server configurations. Across my work, I’ve used tools including Burp Suite, Nmap, Nessus, MOBSF, Frida, and Objection, and hold CREST CPSA, CRTP, CRTA, and CEH V11 certifications.

Experience

Work history, roles, and key accomplishments

Current

Security Consultant

Current

Gruve Technologies

Apr 2025 - Present (1 year 6 months)

Performed end-to-end VAPT across web applications, APIs, mobile (Android & iOS), and network environments, contributing to the assessment of 35+ applications and infrastructure components. Conducted manual security testing of web and API layers, validating authentication workflows, access controls, session management, data handling, and business logic.

Vulnerability Assessment Penetration Testing Web Application Security API Security Mobile Security Network Security Burp suite Nmap Nessus OWASP ZAP Acunetix Frida Objection MobSF Nipper Postman JAD X

Associate Security Consultant

Varutra Consulting

Mar 2024 - Mar 2025 (1 year)

Performed Vulnerability Assessment and Penetration Testing (VAPT) on web applications, Android and iOS apps, APIs, Thick client and network systems, uncovering critical security vulnerabilities and potential exploits. Executed 10+ audits of Firewalls and server configurations, evaluating and strengthening systems to mitigate vulnerabilities.

Vulnerability Assessment Penetration Testing Web Application Security Mobile Security API Security Network Security Burp suite Nmap Nessus MobSF JAD X Frida Objection Firewall Rule Audit Report Writing

Security Analyst

Varutra Consulting

Feb 2023 - Mar 2024 (1 year 1 month)

Conducted comprehensive 22+ projects of VAPT on Web applications, Network, Android, and iOS platforms, identifying security loopholes and potential threats. Utilized Nmap, Burpsuite, Acunetix, Nessus, Metasploit and ZAP for automated and manual assessments, ensuring thorough evaluation of security vulnerabilities.

Vulnerability Assessment Penetration Testing Web Application Security Network Security Mobile Security Nmap Burp suite Acunetix Nessus Metasploit OWASP ZAP

WAPT Intern

VIEH GROUP

Sep 2022 - Jan 2023 (4 months)

Performed information gathering on different domains and subdomain enumeration to analyze URLs. Manually hunted for HTML injection and XSS to exploit it.

information gathering Subdomain Enumeration HTML Injection XSS

Security Associate

SecurityHQ

Feb 2022 - Aug 2022 (6 months)

Analyzed and validated alerts through SIEM tools (Qradar and LogRhythm). Escalated validated and confirmed incidents to SOC Analyst and reported false positive alarms to L2 analysts.

SIEM QRadar LogRhythm Alert Analysis Incident Escalation