Looking for a job

Raghav Joshi

@raghavjoshi2

Message

I test web, API, AI, and mobile applications to uncover exploitable security flaws.

India

Message

What I'm looking for

I'm looking to continue building hands-on application security experience, testing web, API, AI/LLM, mobile, and thick-client applications while collaborating with developers to remediate real security risks.

At Tata Consultancy Services, I conduct manual penetration testing across web, API, AI/LLM, Android, thick-client, and browser-extension applications. I identify vulnerabilities, business-logic flaws, and abuse cases, then develop reproducible PoCs and help teams verify fixes.

I use Burp Suite Professional, OWASP ZAP, and targeted code review to assess issues including CSRF, XSS, IDOR/BOLA, misconfigurations, and exposed credentials. My software development background, AWS security knowledge, and ongoing Web Security Academy practice help me approach application security from both attacker and builder perspectives.

Experience

Work history, roles, and key accomplishments

Current

Penetration Tester

Current

Tata Consultancy Services Ltd.

Feb 2025 - Present (1 year 7 months)

Conducted manual penetration testing across nearly 20 applications spanning web, APIs, AI/LLM, Android/mobile, thick-client, and browser-extension applications. Identified and exploited vulnerabilities such as CSRF, XSS, IDOR/BOLA, and business-logic flaws, and collaborated with developers to remediate findings.

Software Developer Intern

VNR Seeds Pvt. Ltd.

Jul 2023 - Nov 2023 (4 months)

Developed a Flutter-based cross-platform mobile application for conference room booking and scheduling, implementing booking management and conflict prevention. Developed Laravel backend APIs with MySQL for data management and frontend-backend integration.

Flutter Laravel MySQL Mobile Development API Development