At Tata Consultancy Services, I performed vulnerability assessments and penetration testing across web applications, APIs, network infrastructure, and wireless networks. I tested web applications manually and with automated tools, identifying issues including SQL injection, XSS, CSRF, and IDOR.
On my OWASP Juice Shop project, I assessed web and API security using Burp Suite and OWASP ZAP, exploited BOLA/IDOR and SQL injection, and drafted remediation recommendations mapped to OWASP Top 10. I also worked on identity and access management, Unix environments, and SQL database querying.

