At 4aiSOFT, I assess web applications and APIs against OWASP Top 10 risks using Burp Suite Pro, manual request manipulation, and application behavior analysis.
I validate findings across authentication and authorization, session and JWT handling, exposed API endpoints, and sensitive data exposure. I use Burp Proxy and Repeater to capture, modify, replay, and compare HTTP requests and responses.
I prepare vulnerability reports with reproducible steps, sanitized evidence, risk and business impact, and practical remediation recommendations. I also coordinate remediation follow-up and retesting with application owners and technical stakeholders.
My supporting security work includes handling SIEM alerts, managing OpenVPN access, reviewing Azure and Microsoft Defender alerts, and supporting ISO 27001 internal audits.
