Goal-oriented IT professional with over 17 years of experience in IT, actively seeking opportunities in Application security, vulnerability assessment, and penetration testing within a reputable organization. Demonstrated expertise by following agile approach to manage Vulnerability assessment and penetration testing, Free and Open Source Software. Proficient in conducting comprehensive security audits, encompassing planning, analysis, evaluation, reporting, and vulnerability remediation. Specialized in DAST and SAST assessment of Web application security testing. Highly motivated and results-driven consultant with a proven track record of assisting clients in making strategic decisions and solving complex problems. Utilized tools such as Burp Suite, Dir-Buster, Accunetix, OWASP ZAP proxy, NMAP, web scanner, NetSparker, Kali Linux, wpscan, Nessus, testssl etc. for Web Application Security Conducted security audits of web applications in accordance with OWASP Top 10 Vulnerabilities (XSS, SQL Injection, CSRF, etc.) and ensuring compliance with industry standards such as CERT-IN. Developed and implemented comprehensive security strategies for clients, resulting in a 50% decrease in cyber threats and vulnerabilities. Collaborated with cross-functional teams to integrate secure coding practices and implement secure SDLC processes, reducing the number of security incidents by adopting shift left practice. Provided expert guidance and training to clients on secure software development, enabling them to effectively mitigate risks and safeguard sensitive data. Identifying the critical, High, Medium, Low vulnerabilities in the applications based on OWASP Top 10 prioritizing them based on the criticality