rohan rana

I’m an application security engineer specializing in offensive security, vulnerability assessment and penetration testing, and secure code review. I recently earned the OSWE certification, which reflects my focus on advanced web exploitation, source code analysis, and vulnerability discovery.

At Ernst & Young (EY), I’ve supported enterprise clients across multiple industries with application security assessments, penetration testing, and secure code reviews. I help teams identify security weaknesses early, then turn findings into clear remediation guidance for more secure development practices.

My work covers web and API security testing, authentication and access control testing, business logic vulnerabilities, and cloud security assessments across AWS and Azure environments. I also have experience with secure code review across Java, .NET, Node.js, and PHP, plus testing for common injection, SSRF/RCE/unsafe deserialization, file upload/path traversal, sensitive data exposure, and broken authentication.