At Aexantis Technologies Pvt. Ltd., I deliver web application, API, and network penetration testing for enterprise and government clients. I led a critical VAPT engagement that uncovered a chained authentication-bypass and privilege-escalation path in a production application.
I also built the organisation's GRC practice, including an ISO 27001 ISMS rollout and SOC 2 and PCI DSS control mapping. My advisory work covers HIPAA and GDPR, alongside security automation for managed SOC engagements.
At Anmol Industries Limited, I performed full-scope VAPT across web applications, APIs, industrial OT networks, and internal infrastructure, documenting 20+ critical vulnerabilities. At SBI General Insurance, I conducted phishing simulations and email spoofing tests that reduced real phishing incidents by 60%.
I’ve also analysed network events at Tata Consultancy Services and delivered offensive security training to 600+ students through IBM ICT Initiative, via Secuneus Tech. My work draws on methods including MITRE ATT&CK and PTES, and I hold CEH and GCIA certifications.
