Looking for a job

Saksham Malhotra

@sakshammalhotra

Message

I uncover and remediate application, API, network, and infrastructure vulnerabilities.

India

Message

What I'm looking for

I'm seeking Critical Skills Employment Permit–eligible cybersecurity roles in Ireland, with employer sponsorship required.

At Acuity Analytics, I conduct manual and automated penetration testing across web applications, APIs, and network assets, validating vulnerabilities and guiding remediation through revalidation. I produce CVSS-based reports with proof-of-concept evidence and present prioritised findings to technical and non-technical stakeholders.

I've delivered VAPT engagements at DXC Technology and supported security assessments for Gurugram Cyber Cell and ClearExam. I also build Python and Bash automation for reconnaissance and testing workflows, including Dark Crawler, a tool for scanning vulnerable URLs and automated SQLi testing.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Engineer

Current

Acuity Analytics

Dec 2024 - Present (1 year 9 months)

Conducts manual and automated application penetration testing across web applications and APIs, identifying vulnerabilities such as SQL injection, XSS, CSRF, and authentication flaws. Authors assessment reports with CVSS-based risk ratings and provides remediation guidance, while also leading network vulnerability assessments and managing third-party vendor assessments.

Burp suite OWASP ZAP DAST SAST Tenable Nessus Nmap Metasploit Kali Linux Jira OWASP Web Security Testing Guide OWASP Top 10 CVSS PTES NIST SP 800 115 Python BASH SQL C C++PHP

Information Security Analyst (VAPT)

DXC Technology

Jun 2022 - Dec 2024 (2 years 6 months)

Executed VAPT engagements, identifying and exploiting security vulnerabilities using Kali Linux, Burp Suite, Nmap, and Metasploit, and provided actionable mitigation recommendations. Collaborated with cross-functional teams and produced detailed reports summarizing findings, risk, and recommended remediation for stakeholders.

Kali Linux Burp suite Nmap Metasploit VAPT Vulnerability Assessment Penetration Testing Reporting

Cybersecurity Intern (VAPT)

Gurugram Cyber Cell

Jun 2021 - Jul 2021 (1 month)

Performed security assessments using Kali Linux, Burp Suite, Nmap, and Metasploit, and contributed findings reports and remediation recommendations.

Kali Linux Burp suite Nmap Metasploit VAPT Security Assessments

Web Application Penetration Tester (Intern)

ClearExam

Dec 2020 - Feb 2021 (2 months)

Performed VAPT of web applications and network infrastructure, and partnered with developers on remediation, secure-coding practices, and code reviews.

VAPT Web Application Security Network Security Secure Coding Code Review