• Identified and reported 20 vulnerabilities in 6 applications using Veracode’s SAST reports and DAST, mainly utilizing BurpSuite.• Proposed tailored mitigation strategies for discovered vulnerabilities, leveraging insights from the application team.• Gained expertise in OWASP Top 10 vulnerabilities through hands-on testing and research, improving future penetration tests.

• Led the comprehensive assessment and resolution of OWASP’s top 10 vulnerabilities in web applications, validating expertise throughthe successful completion of challenging OWASP Juice Shop tasks.• Administered comprehensive vulnerability assessments and penetration testing using Burp Suite, Acunetix, Havij, Sqlmap, and theMetasploit Framework; identified and remediated critical security gaps, fortifying web application security by 40%.• Conducted rigorous web security audits, resulting in a satisfactory rating by external auditors and strengthened defenses against cyberthreats.

• Developed a Python-based vulnerability scanner, identifying over 50 web application vulnerabilities, leading to a 20% increase in application security.• Assisted in formulating and enforcing security policies, contributing to a 15% improvement in compliance with industry-standard cybersecurity practices.• Implemented encryption solutions for secure data transmissions, resulting in a 25% enhancement in data integrity and confidentiality across projects.

• Compiled Penetration Testing Reports on vulnerable client sites, identifying critical vulnerabilities like SQL Injection and RCE.• Investigated fileless malware, documented Office macro attacks, and developed scripts for exploitation using Python.• Developed insights into Active Directory engagements and memory-based exploitation techniques.