Open to opportunities

Girish Mahajan

@girishmahajan

Message

I test banking applications and APIs, advancing toward red team adversary simulation.

India

Message

What I'm looking for

I'm looking to transition from application penetration testing into Red Team engagements, adversary emulation, and BFSI-specific threat simulation.

At C-Edge Technologies, a TCS-SBI joint venture, I've performed offensive security assessments across 30+ banking web and enterprise applications, 50+ REST APIs, and 20+ Android targets. I turn authentication, authorization, injection, misconfiguration, and data-exposure findings into risk-rated VAPT reports with exploitation proof of concepts for technical and executive stakeholders.

I'm moving from application penetration testing toward Red Team engagements and BFSI threat simulation, backed by MITRE ATT&CK mapping, Active Directory attack labs, and projects spanning LLM attack-surface research, a secured REST API, and a Suricata inline IPS lab.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

C-Edge Technologies

Mar 2025 - Present (1 year 5 months)

Performed offensive security assessments across 30+ web and enterprise applications in a banking environment, exploiting authentication flaws, broken access control, injection vulnerabilities, and misconfigurations. Conducted attack surface analysis, API exploitation testing, and Android offensive testing, and authored VAPT reports for technical and executive stakeholders.

Metasploit Burp suite Nmap Kali Linux OWASP ZAP Wireshark Nessus Web Exploitation OWASP Top 10 NIST CSF PCI DSS Python BASH

Security Intern

Ignicia Technologies

Sep 2024 - Feb 2025 (5 months)

Assisted in conducting network vulnerability scans and compiling findings into structured assessment reports. Gained exposure to web application security testing concepts and documentation practices.

Vulnerability Scanning Web Application Security Documentation