Aspiring Penetration Tester with hands-on experience in web application security testing, both in freelance engagements and controlled security labs. Proficient in Burp Suite, Nmap, Wireshark, SQLmap, and Python, with a strong grounding in the OWASP Top 10, reconnaissance, and vulnerability assessment.
Web Application Security
Black-box assessments against the OWASP Top 10, auditing API endpoints, business logic flaws, input validation, and token authentication.
Offensive Security Labs
Active practice across Active Directory exploitation, Kerberoasting, BloodHound mapping, CTFs, and Linux privilege escalation.
Recon & Vulnerability Assessment
Target enumeration, network mapping, port scanning with custom tools, vulnerability identification, and verification.
Remediation & Reporting
Translating technical vulnerabilities into actionable developer remediation guidance with severity classification and re-testing.
02 // Capabilities
Technical Skills
Categorized competencies based on hands-on practical engagements, lab environments, and security tooling.
Security Tools
Burp SuiteNmapWiresharkSQLmapKali LinuxWazuh
Web Security
OWASP Top 10Web Application Security TestingVulnerability AssessmentReconnaissance
Programming & Scripting
PythonPHPJavaScriptBash
Systems & Networking
LinuxTCP/IPDNSHTTP/HTTPS
Tools & Platforms
GitGitHubVS Code
03 // Track Record
Work Experience
Real-world security testing and intensive cybersecurity training experience.
Security Tester (Freelance)
NoteUndoFreelance Engagement
Jul 2026 – Present
Performed black-box security testing of NoteUndo's waitlist application, covering API endpoints, input validation, business logic, rate limiting, email verification, and token security.
Identified security vulnerabilities and documented findings with clear, actionable remediation recommendations for the development team.
Collaborated directly with the development team to communicate risk severity and verify fixes.
API SecurityAuthentication TestingRate LimitingVulnerability ReportingRemediation Verification
Cybersecurity Trainee
Srishti CampusIntensive Internship
Jul 2025 – Aug 2025
Completed a one-month intensive training program in cybersecurity and networking fundamentals.
Built foundational Python-based security tools, including a custom port scanner.
Gained hands-on exposure to Linux administration, core networking concepts, and cybersecurity principles.