thushar kiran

I am a senior offensive security consultant with extensive hands-on experience in web application and API pentesting, red teaming, SAST/DAST validation, and secure code review. I have led AppSec testing efforts for enterprise banking, fintech and government clients, guiding teams and ensuring clear, actionable reporting.

I have managed onsite VAPT programs, conducted authentication, authorization and business-logic assessments, and performed AD-focused red team operations including enumeration, privilege escalation and lateral movement. I validate DAST findings manually, remove false positives, and coordinate remediation with development and infra teams.

I prioritize clear communication with developers and stakeholders, debrief clients effectively, and standardize testing and audit processes to improve security posture. My work emphasizes practical, high-impact findings and end-to-end delivery of AppSec engagements.