Looking for a job

Thoufeeque N S

@thoufeequens

Message

Pentest | AppSec | VAPT | Security Engineering

India

Message

Senior Application Security Engineer with 10+ years of experience in Web App Pentesting, API Security, Attack Surface Management (EASM), Vulnerability Management, DevSecOps automation, and Security Engineering across Fortune 500 and Big 4 environments. Proven expertise in leading penetration testing activities, owning security programs, handling risk governance, and optimizing enterprise security controls.

Hands-on background in network/web pentesting, cloud exposure review (AWS/Azure), SAST automation, and external attack surface reduction, combined with conceptual experience in AI Security, LLM Red Teaming, and prompt-injection attack surfaces.

Community leader for DEFCON Trivandrum with multiple conference talks at BSides Delhi, c0c0n-precon, and DEFCON Trivandrum. Strong blend of technical depth, teaching ability, and cross-team influence - well-suited for Senior/Lead AppSec, Pentester, Product Security, or Attack Surface Management/EASM roles.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

Advance Auto Parts

May 2022 - Present (3 years 7 months)

Lead penetration tester for the InfoSec team; conducted deep-dive assessments on high-
risk applications, APIs, infrastructure, and wireless networks.
•
Owned and operated the company’s External Attack Surface Management.

Vulnerability Assessment Pentesting Penetration Testing Training SaaS Vulnerability Vulnerability Discovery Vulnerability Testing Attack Surface Management (ASM)Risk Management OWASP OWASP Top 10 OWASP ZAP OWASP Top Ten OWASP ASVS Burp suite

Senior Information Security Analyst

Agility

Oct 2020 - May 2022 (1 year 7 months)

Developed the vulnerability management process in conjunction with regular Vulnerability Assessment and Penetration Testing (VAPT) tasks.

Vulnerability Management Vulnerability Assessment Vulnerability Scanning Solutions Vulnerability Management Security Vulnerability Discovery Vulnerability Testing Pentesting Penetration Testing

Senior Security Engineer

IBS Software

Nov 2019 - Oct 2020 (11 months)

Provided VAPT services for the products while also contributing to the development of the team into a globally capable unit.

Vulnerability Assessment Penetration Testing Team Building

Security Analyst

May 2016 - Nov 2019 (3 years 6 months)

Member of the global information security team, I supported vulnerability assessments for applications EY intended to use worldwide. I worked closely with numerous development teams in various countries to remediate issues and secure the company's application security attack surfaces.