At KPIT Technologies Ltd, I identified and validated vulnerabilities including XSS, SQL Injection, CSRF, IDOR, and SSRF. I performed security testing and vulnerability assessments for web applications, APIs, and networks.
I used Burp Suite, OWASP ZAP, AppScan, and Nessus for DAST and assessments, and performed SAST with Checkmarx. I also reviewed security controls and applied STRIDE, DREAD, CVSS, and attack tree methodologies in threat modeling.
My work included Android mobile app penetration testing, reverse engineering, and APK analysis, as well as validating remediation and documenting findings. I’m CEH certified and have a strong interest in AI security, prompt injection, and building AI-driven offensive tooling.
