Looking for a job

Karan thakor

@karanmakwana

OSCP certified infra security & vulnerability management professional with 9+ years experience and a background in UI development.

India

Message

What I'm looking for

Seeking opportunities in vulnerability management (primary focus), along with infrastructure and web security. Interested in roles involving VAPT, risk remediation, and improving security posture. Looking for a permanent remote (work from home) position where I can contribute and grow.

I am a cybersecurity professional with over 9 +years of experience in infrastructure security, vulnerability assessment, vulnerability management, and Software Composition Analysis (SCA). I have worked with organizations like Tata Consultancy Services, FireCompass, Accenture and Indegene where I focused on identifying security weaknesses, validating findings, and driving effective remediation.

I have strong hands-on experience with tools such as Nessus, Qualys, Burp Suite, and HCL AppScan. I specialize in vulnerability analysis, reducing false positives, and providing clear, actionable remediation guidance. I have also worked on component-level assessments and handled SCA findings using tools like BlackDuck, ensuring accurate reporting and reducing noise for development teams. Additionally, my background in web development helps me better understand application behavior and security gaps.

I hold the OSCP certification, reflecting my practical security testing skills and problem-solving approach. I am particularly interested in infrastructure security and improving vulnerability management processes. I enjoy deep-diving into vulnerabilities, refining testing methodologies, and continuously enhancing my skills, and I am looking for opportunities where I can contribute to strengthening an organization’s security posture.

Experience

Work history, roles, and key accomplishments

Current

Assistant Consultant

Current

Tata Consultancy Services

Jan 2023 - Present (3 years 3 months)

Currently working as a Consultant, performing VAPT and vulnerability management using tools like Nessus, Qualys, Burp Suite, and AppScan. Responsible for validating findings, reducing false positives, and providing remediation guidance. Also handle SCA findings via BlackDuck and ensure timely closure of vulnerabilities within SLA through stakeholder coordination.

Vulnerability Management Infrastructure Security Qualys Nessus IBM AppScan Burp suite Kali Linux

Current

Consultant

Current

Tata Consultancy Services

Jan 2023 - Present (3 years 3 months)

Conducted VA/PT assessments using Nessus, HCL AppScan, Qualys and Burp Suite, validated findings and mitigated false positives while ensuring timely remediation within SLA. Performed component vulnerability assessments and managed ServiceNow tickets for BlackDuck false positives.

Vulnerability Assessment Penetration Testing Nessus Burp suite Qualys Black Duck ServiceNow

Red Team Security Analyst

Firecompass Technologies Pvt. Ltd.

Apr 2021 - Jan 2023 (1 year 9 months)

Conducted security assessments for external-facing Web applications, Mobile applications, API and on continuously monitored delta assets. Executed Dark web assessments for clients and contributed to internal Network Security assessments using the Nessus tool. Perform Azure cloud assessment using ScoutSuite to identify potential misconfigurations.

Security Nessus Azure Cloud

Associate Consultant

AccentureSolutions Pvt. Ltd.

Feb 2017 - Apr 2021 (4 years 2 months)

Conducted VA and PT Assessments, employing tools like Nessus, Acunetix, HCL AppScan and Burp Suite. Produced concise, actionable reports for teams and played a key role in facilitating efficient remediation processes.

Assessments Nessus Burp suite ServiceNow

Senior Analyst

Accenture Solutions Pvt. Ltd.

Feb 2017 - Apr 2021 (4 years 2 months)

Conducted application security assessments, executed security tools, validated findings and mitigated false positives to improve application security posture across engagements.

Application Security Penetration Testing Security Tools False Positive Management Reporting OWASP