Mar 2026 – Present · 2 mos

• Lead and deliver end-to-end security engagements, taking full ownership of projects while mentoring and supporting junior consultants and associates.
• Conduct advanced cloud penetration testing, including post-exploitation scenarios from initial foothold to privilege escalation and access to cloud environments (e.g., AWS).
• Collaborate with cross-functional teams to strengthen overall security posture and ensure best practices are followed.
• Perform comprehensive security assessments across multiple domains, including
• Web application security testing
• API and GraphQL security testing
• Network penetration testing
• Mobile application security testing

Mar 2023 – Mar 2026 · 3 yrs

• Conducted over 100 web, API, network penetration tests, cloud configuration reviews, and AI/LLM assessments for enterprise applications, identifying and reporting security vulnerabilities, leading to improved application security.
• Collaborated with developers, service teams to remediate security flaws, ensuring secure SDLC practices and enhancing overall security posture.
• Conducted multiple cloud security assessments, including architecture evaluations, configuration audits, and code reviews, for cloud-services supporting more than one million users. Helped identify multiple vulnerabilities before the code freeze date which helped the vulnerable services from being showcased in global summits and conferences.
• Performed architecture reviews, ensuring the alignment of systems with industry best practices and standards.
• Developed proficiency in creating and utilizing threat models as a strategic tool for assessing and mitigating potential risks, enhancing the overall security posture of the systems.
• Served as an SME for a major enterprise client, which involved bidding on projects, scoping them, and helping consultants with the project delivery.
• Mentored associate consultants, improving team skill levels in web, AI/LLM and delivered technical presentations on various topics including GraphQL, AI/LLM Security, and threat models

Jul 2022 – Mar 2023 · 8 mos

• Conducted numerous comprehensive web, API, and external infrastructure assessments.
• Conducted over 30 comprehensive cloud assessments, including architecture evaluations, configuration audits, and code reviews, for services supporting more than one million users.
• Led multiple client-facing calls to communicate project status, explain technical findings, and align on testing methodologies and objectives.