Looking for a job

Sanatkumar User

@sanatkumaruser

Message

I secure software releases through code review, threat modeling, penetration testing, and vulnerability remediation.

India

Message

At Global Payments, I review HackerOne vulnerability reports, strengthen Snyk-based code and dependency scanning, and provide security sign-off for product releases. I also regularized penetration-test scheduling and lead security champions in prioritizing remediation.

I've delivered secure code reviews, software composition analysis, and end-to-end web and API penetration testing at Infosys, Tech Mahindra, and Deutsche Bank. My work has identified critical security gaps across payments, manufacturing, telecom, and banking environments.

I translate technical findings into actionable remediation guidance for developers and stakeholders. I'm a CEH-certified security professional who has also mentored junior analysts, supported hiring, and automated recurring security assessment work.

Experience

Work history, roles, and key accomplishments

Current

Technical Consultant

Current

Global Payments

Apr 2024 - Present (2 years 5 months)

Review and triage vulnerability reports from HackerOne, strengthen secure code review with Snyk, and automate security testing tasks. Act as liaison between InfoSec and development teams, guide security champions, and provide security sign-off for releases.

HackerOne Snyk SAST SCA Penetration Testing Vulnerability Management Automation

Consultant

Infosys Ltd

Feb 2021 - Apr 2024 (3 years 2 months)

Conducted secure code review using Fortify, performed software composition analysis with OWASP Dependency Check, and led penetration testing of web applications and APIs. Reviewed test reports, supported hiring, and owned test planning and release roadmap.

Fortify OWASP Dependency Check SAST SCA Penetration Testing Web Application Security API Security Test Planning AWS

Information Security Analyst

Tech Mahindra Ltd

Nov 2018 - Feb 2021 (2 years 3 months)

Performed threat modeling and application design reviews, conducted DAST/SAST testing across numerous applications, and delivered findings reports and remediation plans. Also performed infrastructure vulnerability assessments using Nessus and extended coverage to mobile security.

Threat Modeling DAST SAST Nessus Vulnerability Assessment Mobile Security Android Reporting

Information Security Senior Analyst

Deutsche Bank

Jul 2015 - Nov 2018 (3 years 4 months)

Performed VAPT and governed Application Penetration Testing, External/Internal Vulnerability Testing, and Security Compliance Configuration Management programs. Served as central point of contact for remediation across CSO security controls.

VAPT Penetration Testing Vulnerability Management Security Compliance SCCM Stakeholder Coordination