Looking for a job

Vinit Kundu

@vinitkundu

Message

I uncover and remediate critical web, network, and cloud security vulnerabilities.

India

Message

What I'm looking for

I'm looking to continue hands-on penetration testing and Red Team work, uncovering meaningful risks and collaborating with development, DevSecOps to strengthen detection, remediation, and application security.

I've conducted penetration tests for Home Credit India and SafeAeon, assessing web, mobile, API, network, and cloud environments to uncover actionable security risks.

At SafeAeon, I discovered and reported 500+ vulnerabilities across 50+ client environments, documenting critical and high-risk findings with CVSS scoring, proof of concepts, business impact, and remediation guidance. I also partnered with SOC teams on Red/Purple Team exercises, mapped findings to MITRE ATT&CK, and built Python and Bash utilities for repeatable reconnaissance and reporting workflows.

My security research includes MITRE-recognized CVE-2025-63872 for a critical SVG injection-based XSS flaw in DeepSeek Chat, alongside responsible disclosures involving OpenAI ChatGPT, Orient Electric, Quickwork, and ELAN Limited.

Experience

Work history, roles, and key accomplishments

Current

Penetration Tester

Current

Home Credit India Private Limited

Dec 2025 - Present (9 months)

Conducts end-to-end penetration testing of web, mobile, and API applications, identifying and exploiting vulnerabilities aligned with OWASP Top 10. Performs security reviews of application changes and collaborates with development and DevSecOps teams to drive fixes.

Penetration Testing Web Application Security API Security OWASP Top 10 Nessus Burp suite Vulnerability Assessment DevSecOps