Open to opportunities

Midhun Mohanan

@midhunmohanan1

Message

Offensive Security Consultant with 4+ years delivering web, mobile, API, and network security assessments.

India

Message

What I'm looking for

I’m looking for a role where I can lead web, mobile, API, and thick-client assessments, run adversary simulations, and automate security testing—partnering with engineering to deliver clear remediation guidance and measurable risk reduction.

I’m an Offensive Security Consultant with 4+ years of experience delivering web, mobile, API, iOS, thick client, and network security assessments across BFSI and enterprise environments. I’ve completed 450+ assessments for clients including ICICI, HDFC, Kotak, DCB, City Union, and Upstox, and I specialize in adversary simulation, EDR evasion, Android reverse engineering, secure code review, and security automation.

I align my work to frameworks like OWASP Top 10, SAMA, and PTES, combining SAST/DAST/SCA and CI/CD security support with clear reporting and remediation guidance. I’ve used tooling and techniques such as runtime instrumentation, binary analysis, and exploitation to reduce remediation cycle time by 25%, and I’m recognized by Apple, Intel, and the Government of India with certifications including CPTS, BSCP, CRTP, and CAP.

Experience

Work history, roles, and key accomplishments

Current

Information Security Consultant

Current

Securseed / Versos

Oct 2025 - Present (8 months)

Performed web, mobile, API, and iOS penetration tests aligned with OWASP Top 10 and SAMA; executed Android reverse engineering and runtime instrumentation to identify exploitable issues. Conducted internal/external network and thick-client assessments and mentored junior consultants on risk clarification and remediation.

Penetration Testing OWASP Top 10 Android Reverse Engineering Thick Client Testing Binary Analysis Security Mentoring

Security Consultant

GreenMethod / Activbytes

Jun 2023 - Jun 2025 (2 years)

Delivered web, mobile, API, and iOS penetration tests aligned with OWASP Top 10 and PTES, including advanced Android reverse engineering and runtime manipulation. Built phishing infrastructure, ran adversary simulations, and automated pentest workflows that reduced vulnerability remediation cycle time by 25% while providing risk reports and remediation guidance to engineering teams.

Penetration Testing OWASP Top 10 Android Reverse Engineering Runtime Manipulation Dependency Check SCA CI CD Security Adversarial Testing

Information Security Consultant

QSEAp Infotech Pvt Ltd

Jun 2021 - Jun 2023 (2 years)

Conducted 450+ security assessments for BFSI clients including ICICI, HDFC, Kotak, DCB, City Union, and Upstox, identifying issues such as XSS, SQL injection, SSRF, CSRF, and privilege escalation. Performed static/dynamic Android testing and API/thick-client pentests and supported secure SDLC through source code review and developer collaboration on mitigations.

Vulnerability Assessment XSS SQLi SSRF CSRF Testing Android Testing Frida API Testing Source Code Review Secure SDLC