5+ years of experience Application Security Penetration Testing DevSecOps Cloud Security
Experienced Security Engineer specializing in securing Web, Mobile (Android/iOS), API, Cloud, and Infrastructure environments. Strong hands-on background in penetration testing, vulnerability assessment, OWASP security testing, Secure SDLC, DevSecOps, threat modeling, and security automation.
Key Expertise:
* Web, API & Mobile Application Security
* Penetration Testing & Vulnerability Assessment
* OWASP Top 10 / WSTG / MASVS
* Authentication, Authorization & Business Logic Testing
* SAST, DAST, SCA & Secret Scanning
* DevSecOps & CI/CD Security
* AWS & Cloud Security Assessments
* Container & Infrastructure Security
* Threat Modeling & Secure Design
* Vulnerability Management & Remediation
Tools: Burp Suite, OWASP ZAP, Nmap, Metasploit, Nuclei, SonarQube, Trivy, Dependency-Track, Frida, MobSF, Prowler, Pacu, GitHub Actions, Azure DevOps and more.
Highlights: 350+ vulnerabilities reported through responsible security research, with recognition from organizations including Google, Microsoft, Apple and Sony.
Open to: Senior Application Security Engineer Penetration Tester DevSecOps Security Engineer Security Consultant
Open to remote, freelance and suitable relocation opportunities
If your organization is looking for someone who can both find vulnerabilities and help engineering teams fix them, let’s connect.
