Tarun Kumar

Product Engineer

Gurugram, Haryana, India8 yrs experience

Most Likely To SwitchHighly Stable

Key Highlights

Over 3 years of experience in offensive security.
Expert in identifying vulnerabilities across multiple platforms.
Passionate about continuous learning and problem-solving.

Stackforce AI infers this person is a Cybersecurity Specialist with expertise in penetration testing and vulnerability assessment.

Contact

Skills

Core Skills

Penetration TestingCybersecurityMobile Application Security

Other Skills

API TestingC++Cloud SecurityCompliance AuditsDevSecOpsInformation SecurityJavaMicrosoft OfficeMobile TestingNetwork SecurityNetwork TestingPython (Programming Language)ReportingVulnerability AssessmentWeb Application Security

About

🔐 Cybersecurity Professional | Penetration Tester | Security Researcher With over 3 years of experience in offensive security, I specialize in identifying and exploiting vulnerabilities across web, mobile, network, APIs, thick clients, and cloud environments. Skilled in performing comprehensive security assessments and uncovering critical flaws, I bring a deep understanding of security architectures and attack vectors. Passionate about problem-solving and continuous learning, I thrive on breaking systems to make them stronger. From cloud configuration reviews to advanced pentests, I ensure robust security postures for organizations. Let’s connect to secure the digital world together!

Experience

Confidential

Senior Information Security Consultant

Nov 2022 – Present · 3 yrs 4 mos · Gurugram, Haryana, India

Conduct web, mobile, and API penetration testing to identify vulnerabilities and strengthen security postures.
Perform network penetration testing to assess infrastructure weaknesses and recommend mitigation strategies.
Evaluate cloud configurations for security misconfigurations, performing compliance audits of O365, AWS, and GCP environments using CIS Benchmarks.
Analyze and test thick client applications for security flaws and potential exploitation risks.
Document findings in detailed security reports, providing actionable remediation recommendations.
Identified and reported high-risk vulnerabilities across numerous applications, contributing to enhanced security.

Penetration TestingDevSecOpsInformation SecurityCybersecurityWeb Application SecurityNetwork Security+2

Detox technologies pvt ltd

2 roles

Associate Cyber Security Analyst

Mar 2022 – Oct 2022 · 7 mos · Noida, Uttar Pradesh, India

Performed web, Android, and iOS application penetration testing to identify and report security vulnerabilities.
Conducted network penetration testing to assess infrastructure security and detect potential threats.
Created detailed security reports outlining vulnerabilities, risk assessments, and recommended remediation.
Reviewed and refined security documentation, ensuring accuracy and alignment with industry best practices.

Penetration TestingMobile TestingAPI TestingWeb Application SecurityNetwork TestingMobile Application Security

Cyber Security Intern

Sep 2021 – Feb 2022 · 5 mos · Noida, Uttar Pradesh, India

Assisted in penetration testing and security assessments to identify vulnerabilities.
Conducted extensive OSINT (Open Source Intelligence) reconnaissance, gathering information to support security testing efforts.
Learned and applied cybersecurity tools such as Burp Suite (web application testing) and Postman (API testing).
Assisted in client calls and reporting, contributing to security assessments and documentation under senior analysts' guidance.
Supported security research, analyzing potential threats and compiling findings for internal use.

Ieee industry application society ohi chapter

Member and Volunteer

Dec 2018 – May 2021 · 2 yrs 5 mos · Gurugram, Haryana, India

Ieee computer society

Student Member

Nov 2018 – May 2021 · 2 yrs 6 mos · Gurugram, Haryana, India

IEEE is the world’s largest technical professional organization dedicated to advancing technology for the benefit of humanity. IEEE and its members inspire a global community through its highly cited publications, conferences, technology standards, and professional and educational activities.

Bug bounty zone

Bug Bounty Hunter

Jan 2017 – Mar 2018 · 1 yr 2 mos · Gurugram, Haryana, India

Discovered and responsibly reported security vulnerabilities in high-profile financial platforms, including American Express (AMEX), PayU Payment Gateway, and Citibank's Credit Card Online Transaction System, contributing to enhanced security and risk mitigation.