Open to opportunities

Sourave Singh

@souravesingh

Message

Penetration tester specializing in infrastructure and application security.

India

Message

What I'm looking for

I seek hands-on security roles where I can perform VAPT across apps and networks, contribute to compliance programs, collaborate with engineering teams, and grow into advanced offensive security or specialist consultancy positions.

I am a penetration tester with over four years in IT and two years focused on VAPT, delivering thorough infrastructure and application security assessments using industry-standard tools and frameworks. I have conducted ENPT, INPT, APT, SegPT, ASV scans, and CDD to support PCI DSS, HIPAA, and SOC2 compliance while providing CVSS-based PoCs and remediation plans.

My hands-on experience spans network, web, mobile, container, and cloud security, leveraging tools like Burp Suite, Nessus, Rapid7, Nmap, MobSF and Frida, and SIEM platforms such as Splunk. I consistently collaborate with cross-functional teams, produce audit-ready documentation, and have a proven record of identifying critical vulnerabilities and aligning findings with standards like NIST 800-53 and HITRUST.

Experience

Work history, roles, and key accomplishments

Current

Associate Security Consultant

Current

ControlCase

Mar 2024 - Present (1 year 7 months)

Conduct external and internal network penetration testing, application penetration testing, ASV scans and Card Data Discovery to support PCI DSS audits, improving detection and remediation of critical vulnerabilities.

Penetration Testing Burp suite Nessus Nmap PCI DSS ASV Scanning Vulnerability Assessment

Systems Associate

Infosys Limited

Sep 2023 - Feb 2024 (5 months)

Collaborated on IT infrastructure changes, maintained configuration documentation for audits and compliance, and led CAB presentations for change approvals to ensure reliable operations.

IT Infrastructure Change Management Configuration Management CAB Documentation & Compliance Windows Linux

Operations Executive

Infosys Limited

Jul 2021 - Aug 2023 (2 years 1 month)

Administered cloud and on-premises infrastructure, managed patching and asset inventory, and ensured high availability of Windows, Linux and database servers with accurate documentation.