Open to opportunities

Shanmukha Priya J

@shanmukhapriyaj

I uncover application security vulnerabilities through penetration testing, code review, threat hunting, and Python automation.

India

Message

I've delivered penetration testing and security assessments for web, mobile, API, thick-client, network, and cloud environments at Coforge, WeSecureApp (now Strobes), and Castellum Labs.

At WeSecureApp, I identified critical and high-severity issues including SQL injection, account takeover through improper AWS Cognito authentication handling, race conditions, and IDOR leading to unauthorized order cancellations. I also reviewed Kong API Gateway configurations, performed source code reviews, and produced actionable remediation reports.

At Coforge, I assess web and mobile applications for security and business-logic flaws, validate against OWASP Top 10 and secure coding standards, and create PoC videos, risk-based reports, and vulnerability tracking documentation.

I've also automated attack surface management and vulnerability activities with Python, contributed to threat hunting, and mentored junior team members on web application penetration testing practices.

Experience

Work history, roles, and key accomplishments

Current

Senior Engineer

Current

Coforge

Jul 2025 - Present (1 year 1 month)

Conducts penetration testing on web and mobile applications, analyzes attack vectors, and validates against OWASP Top 10. Drafts detailed security assessment reports and develops PoC videos and technical documentation.

Penetration Testing Burp suite OWASP Top 10 Security Assessments PoC Development

Security Analyst

WeSecureApp Private Limited

Mar 2024 - Jul 2025 (1 year 4 months)

Performed penetration testing across web, mobile, API, thick client, and network infrastructures. Executed cloud security reviews and delivered comprehensive security reports with remediation strategies.

Penetration Testing Web Security Mobile Security API Security Network Security Cloud Security Kong API Gateway

Security Engineer

Castellum Labs

Jun 2021 - Mar 2024 (2 years 9 months)

Conducted web application penetration testing, SAST, and mobile application pentesting. Automated Attack Surface Management using Python and mentored junior team members.

Web Application Testing SAST Mobile Pentest Secure Code Review Python Automation Threat Hunting Threat Analysis Attack Surface Management Mentor

Virtual Testing Foundation Intern

Virtually Testing Foundation

Apr 2021 - Jun 2021 (2 months)

Gained foundational knowledge in threat modelling, threat alignment, and purple teaming. Exposed to the EASY Framework, FIN6 emulation, and enterprise security testing using AttackIQ.

Threat Modeling FIN6 Emulation

Software Engineer Intern

Metagogy Learning Systems Pvt Ltd

Jan 2020 - Mar 2020 (2 months)

Enhanced website functionality using HTML, developed Python-based assessments for student evaluation, and applied foundational machine learning concepts to analyze data patterns.

HTML Python Machine Learning