Worked as Application Security Engineer for one of the client (National Stock Exchange), Managed the projects in different areas such as [#] Source Code-review: ==================================[+] Checkmarx[+] Manual Review==================================[#] Application Security:==================================[+] Web application[+] Mobile apps[+] Thick clients[+] APIs==================================[#] Have found & reported critical vulnerabilities such as:==================================[+] Unauthenticated RCE[+] HTTP Request smuggling[+] Cross site web socket hijacking[+] SQL injection[+] Account takeovers etc.==================================

==================================Web application | VAPT ==================================I have successfully completed VAPT for more than 20+ Websites including B2B, B2Cand Government websites and have found critical vulnerabilities in it. Also havesubmitted proficient report which suggest best solution for the same. ==================================Network | VAPT ==================================I have successfully completed Network VAPT by myself which was consist of 200network devices including servers,firewall,Desktops, switches etc. and have found critical network vulnerabilities too. ==================================Firewall | VAPT/Audit ==================================I have successfully completed the VAPT & security audit of the firewall for one of ourclient. VAPT :- VAPT of firewall was totally new project for me hence got the opportunityfor learning something new, It was covering the implementation & Deployment ofthe firewall and testing of the application which were associated with it E.g - Where in network the firewall is being deployed and to test for bypassing thefirewall. Audit :- Audit part was covering some general security audited topics where I hadcreated one checklist and to check all the security elements were in place or notE.g - Which are the rules defined in the firewall, Is there any unnecessary ports isopen and the physical security of the firewall. ==================================Database Assessment ==================================I have successfully completed the Database Assessment for one of our client and havefound critical security loop holes in their system.

I've Developed Software in many language such as :-> Windows application using C#.Net.> Todo_list/Calc any many small Android app using Android Studio.> Server Client, Packet Sniffer, Zip Password Cracker using Python.