Venkatakirana S

Cyber security Engineer

Qualitest private LTD

02.2021 - 08.2022

Identified and designed test cases for modern security vulnerabilities, transforming them into security control services for clients.
Conducted Web Application Penetration Testing for numerous client applications, discovering critical vulnerabilities, including privilege escalation, authentication bypass, stored XSS, buffer overflows, bulk information disclosure, CSRF, SSRF, etc.
Created detailed reports containing steps to reproduce issues, POCs, and migration strategies for remediation.
Provided remediation consulting services to clients based on security issues identified during penetration testing.
Conducted Android & iOS Application Penetration Testing, uncovering critical vulnerabilities such as account takeover, information disclosure, insecure data storage, insecure logs, authentication bypass, and various session issues. Reported findings with detailed mitigations.
Identified various scenarios for testing APIs during API penetration testing, designing detailed test cases for each scenario, and discovering vulnerabilities in APIs.
Performed standalone Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans for client applications. Conducted false positive and false negative analyses for automated reports.
Conducted cloud auditing based on CIS Benchmarks.
Designed and implemented tooling and automation for application security (e.g., SAST/DAST in CI/CD).
Conducted retesting on client applications to verify the proper application of mitigations, identified advanced bypass methods, and suggested fixes for bypass.
Delivered specialized training for teammates on web application and mobile application penetration testing using various tools and manual approaches.
Conducted webinars for internal team on modern vulnerabilities and advanced WAF bypass methods.
Planned, executed, and managed projects, contributing to committees or teamwork.
Created policies and procedures for emerging security technologies and proposals.
Developed security metrics and technical analyses to provide insight into performance and trends.
Developed, implemented, and documented security programs and policies, monitoring compliance across departments.
Validated and verified system security requirements definitions and analyzed system security designs.