Open to opportunities

Sourav Kumar

@souravkumar11

Message

Information Security Analyst Senior at FIS Global, advancing AI-augmented penetration testing with MCP and Claude LLM.

India

Message

At FIS Global, I develop penetration testing services for emerging fintech technologies, including automation and AI-based systems. I’m pioneering AI-augmented security testing workflows that integrate MCP with Claude LLM to accelerate vulnerability discovery and report automation.

At Jio Telcom, I performed penetration testing and vulnerability assessments of web applications in a Core 5G environment, reporting findings and remediation actions to the team.

Earlier at FIS Global, I tested web applications, Android and iOS apps, APIs, and networks. I reported critical and high-severity issues and helped internal developers mitigate vulnerabilities.

Across roles at Ernst and Young EY, Skillcube Pvt. Ltd., and other employers, I worked on application security assessments, infrastructure VAPT, API testing, and vulnerability management. At Ernst and Young EY, I also designed and implemented a vulnerability management target operating model for a fintech firm.

Experience

Work history, roles, and key accomplishments

Current

Information Security Analyst Senior

Current

FIS Global

Jan 2024 - Present (2 years 8 months)

Developing and implementing penetration testing services tailored to emerging fintech technologies, including automation and AI-based systems. Pioneering AI-augmented security testing workflows using MCP integrations with Claude LLM to accelerate vulnerability discovery and report automation.

Penetration Testing AI Security MCP LLM Fintech Security Automation SDLC Market Research

Information Security Manager

Jio Telcom

Sep 2021 - Jan 2024 (2 years 4 months)

Performing penetration testing and vulnerability assessment of Web applications hosted in Core 5G environment. Providing comprehensive reports on vulnerabilities and action items to fix identified vulnerabilities.

Penetration Testing Vulnerability Assessment Web Application Security Reporting

Senior Information Security Engineer

FIS Global

Jul 2021 - Sep 2021 (2 months)

Performing penetration testing and vulnerability assessment of Web applications, Mobile (Android and iOS), APIs and Networks. Identified and reported critical and high severity security issues like RCE, Privilege Escalation, Broken-Authentication, CSRF, XSS, IDOR, SSRF, SSTi, SQLi, and many more.

Penetration Testing Vulnerability Assessment Web Application Security Mobile Security API Security Network Security OWASP RCE OS Privilege Escalation CSRF XSS IDOR SSRF SSTi SQLI

Associate Consultant

Ernst and Young EY

Feb 2020 - Jul 2021 (1 year 5 months)

Engaged with teams and individuals for carrying out Application Security Assessment, Infrastructure VAPT, and API testing for various clients. Worked on end-to-end TRA of critical applications and infrastructure of a major insurance provider across multiple global regions.

Application Security Network Infrastructure VAPT API Testing Technology Risk Assessment Vulnerability Management AWS Firewalls Antivirus Configuration Audits

Consultant

Skillcube Pvt. Ltd.

Jan 2019 - Feb 2020 (1 year 1 month)

Worked on multiple engagements of Application vulnerability assessment & penetration testing for various industry sectors, including national and international projects. Involved in security configuration reviews of critical servers and network devices.

Vulnerability Assessment Penetration Testing Security Configurations Servers Network Devices

Information Security Analyst

Confidential

Feb 2017 - Jan 2019 (1 year 11 months)

Delivered services of Application Security, Vulnerability Assessment & Penetration Testing for customers across various regions including product-based, financial & government sectors. Prepared written reports for executives and stakeholders explaining vulnerabilities and providing mitigation recommendations.

Application Security Vulnerability Assessment Penetration Testing Reporting Stakeholder Management