- Lead complex penetration testing projects across various platforms, including web, mobile, API, and cloud, identifying critical vulnerabilities and implementing remediation strategies.- Mentor and guide junior team members, overseeing vulnerability assessments, refining security processes, and ensuring high standards in report quality.- Oversee vulnerability management processes, including vulnerability scanning, assessment, and prioritization, to mitigate security risks across all environments.- Conduct advanced red team exercises and threat modeling, simulating sophisticated attacks to evaluate and strengthen client defenses.- Collaborate with cross-functional teams to integrate security practices into the SDLC, enhancing security awareness and efficiency.- Enhanced security automation by developing and optimizing Python and Bash scripts, improving assessment accuracy and reducing manual testing time by 40%.- Conduct code reviews to identify security flaws, ensuring best practices in secure coding and contributing to overall product security.

- Conducted comprehensive penetration tests on web, mobile, desktop, API, and cloud platforms, successfully identifying and mitigating critical security vulnerabilities.- Performed in-depth vulnerability assessments following OWASP, MITRE ATT&CK, and SANS25 guidelines, enhancing the security posture and compliance with industry standards.- Developed and refined Python and Bash scripts to automate routine security tasks, increasing operational efficiency and streamlining security assessments.- Authored detailed reports on identified vulnerabilities, providing actionable remediation and mitigation strategies.- Led the creation and execution of red team scenarios, simulating advanced cyber attacks to evaluate and enhance organizational defenses.

- Assisted in penetration testing of web applications, identifying and reporting high-risk vulnerabilities to development teams, contributing to prompt remediation efforts.- Optimized vulnerability scanning processes using security tools, including Nessus, Burp Suite, and SpiderFoot, effectively managing vulnerabilities and minimizing security risks.- Conducted triage of team-generated reports, ensuring quality and accuracy before submission to clients, showcasing strong attention to detail and report management skills.- Gained hands-on exposure to red team operations and threat modeling techniques, building a solid foundation in advanced security practices.- Developed basic automation scripts in Python and Bash to streamline routine security operations, boosting efficiency and supporting the red team’s objectives.