Professional IT Experience in Application Security Testing particularly focused on performing technical activities like Code review, Vulnerability Analysis, Penetration testing, Secure Application Testing based on OWASP.• Having experience in penetration testing of Web Applications.• Ability to perform security testing on any web based application.• Good understanding of OWASP top ten vulnerabilities.• CEH (Certified Ethical Hacker) v9 certifiedKNOWLEDGE OF ATTACKS :XSS, SQL Injection, Session Hijacking, URL Manipulation,CSRF Attack, Brute Force, Open Redirection, Missing Function Level Access Control, Business Logic Bypass, RFI/LFI, Format String, Command Injection, Authentication Flaws, HTTP Parameter Pollution, HTTP Header attacks, DOS/DDOS, Request-Response Manipulation, HTTP Response Splitting, Hoogling/Dorking, Man in Middle attack, CORS exploitation etc.ACHIEVEMENTS: 1. Reported Web Cache Deception in one of the leading IT services company.2. Listed In Google Hall of Fame (For informing about a broken authorization vulnerability)3. Informed Google about URL redirection Vulnerability in theirhttps://bughunter.withgoogle.com/ subdomain4. Received Appreciation from WhatsApp team twice for informing about a functional issue andUI breakdown issue in WhatsApp application.5. Received Appreciation from Changepoint team for informing PE vulnerability in their ERPproduct.6. Informed Tooler (Laundry Service Company) about weak authorization process in website.7. Quarterly Award winner (Q1 2016) at Lochbridge (Current Organization)8. Received Certificate of Achievement for Exceptional Performance in financial year 2016 and2018