Open to opportunities

Riaz Khan

@riazkhan1

Message

Systems engineer and penetration tester with 3+ years' experience in application and API security.

India

Message

What I'm looking for

I seek roles focused on application and API security where I can perform penetration testing, drive remediation, integrate security into SDLC, and grow technically while mentoring teams.

I am a systems engineer and penetration tester with over three years of hands-on experience in manual penetration and application testing, focused on web and mobile applications.

I have performed Dynamic Application Security Testing (DAST) and manual penetration testing using Burp Suite and Postman, identifying OWASP Top 10 vulnerabilities such as SQLi, XSS, XML injection, IDOR, path traversal and insecure file upload.

I collaborate with development teams to review findings, explain exploitability and impact, and provide remediation guidance; I also conduct regression and progression testing within enterprise release cycles and integrate security across the SDLC.

I hold a B.Tech in Computer Science and certifications including Certified Ethical Hacker (CEH) and Purdue Applied Cybersecurity Essentials, and I seek roles where I can strengthen application security posture and mentor engineering teams.

Experience

Work history, roles, and key accomplishments

Current

Systems Engineer

Current

Infosys

Mar 2022 - Present (3 years 7 months)

Performed manual penetration testing and DAST on Verizon web applications, identifying OWASP Top 10 vulnerabilities (SQLi, XSS, IDOR, XML injection) and delivering remediation plans to stakeholders. Trained development teams, conducted regression/progression testing, and integrated security practices across the SDLC.

Penetration Testing Burp suite Postman OWASP Top 10 DAST Vulnerability Management SDLC Agile Reporting

Software Tester

Ouris Health Pvt Limited

Sep 2020 - Nov 2021 (1 year 2 months)

Executed manual functional testing for web and mobile (iOS/Android) health applications, authored detailed bug reports and maintained test cases across the SDLC to support timely releases. Collaborated with cross-functional teams to deliver validated releases.

Manual Testing Bug Reporting Mobile Testing Web Testing SDLC Regression Testing