Bishal Yadav

Consultant

Bengaluru, Karnataka, India1 yr 7 mos experience

Key Highlights

Expert in vulnerability assessment and penetration testing.
Hands-on experience with industry-standard security tools.
Passionate about enhancing digital security.

Stackforce AI infers this person is a Cybersecurity Specialist with a focus on application security and vulnerability management.

Contact

Skills

Core Skills

Vulnerability AssessmentPenetration TestingInformation SecurityNetwork Security

Other Skills

Penetration Testing (VAPT)Information Security ConsultingBurp SuitePostmanSASTDASTOWASPInsecure Direct Object References (IDOR)Cross-Site Scripting (XSS)Broken Access ControlsAuthentication flawsApplication Security AssessmentsInformation Technology InfrastructureNetworkingWireshark

About

Hello, I’m Bishal Yadav, a cybersecurity professional passionate about strengthening digital security. I have hands-on experience in Penetration Testing, Web Application Security (WAPT), Mobile Application Security Testing (MAST), Vulnerability Assessment and Penetration Testing (VAPT), Ethical Hacking, API Security Testing, and Network Security. My academic journey has provided me with a strong foundation in cybersecurity, and I am continuously driven to expand my expertise. I am enthusiastic about contributing to impactful cybersecurity projects and collaborating with like-minded professionals to make the digital world safer. 📩 Let’s connect: bishalyadav9191@gmail.com

Experience

1 yr 7 mos

Total Experience

9 mos

Average Tenure

9 mos

Current Experience

Ultraviolet cyber

2 roles

Offensive Security Services, Consultant

Jan 2026 – Present · 5 mos · Bengaluru, Karnataka, India

Professional Services Consulting, Specialist

Sep 2025 – Jan 2026 · 4 mos · Bengaluru, Karnataka, India

Conducts end-to-end security assessments including Web App Pentesting, API Testing, DAST and SAST assessments for global enterprise clients.
Delivers detailed application security assessments and consulting, aligned with OWASP Top 10, SANS 25, and UVCyber standards.
Utilizes industry-standard tools such as Burp Suite, Postman, testssl, and custom scripts to identify, validate, and document security vulnerabilities in web applications and APIs.

Vulnerability AssessmentPenetration Testing (VAPT)Information Security ConsultingPenetration Testing

Black duck

2 roles

Professional Services Consulting, Specialist

Nov 2024 – Sep 2025 · 10 mos · Bengaluru, Karnataka, India · On-site

Conducted 50+ end-to-end security assessments including Web App Pentesting, API Testing, DAST and SAST assessments for global enterprise clients.
Delivered detailed application security assessments and consulting, aligned with OWASP Top 10, SANS 25, and Black Duck standards.
Utilize industry-standard tools such as Burp Suite, Postman, testssl, and custom scripts to identify, validate, and document security vulnerabilities in web applications and APIs.

Application Security Trainee

Oct 2024 – Oct 2024 · 0 mo · Bengaluru, Karnataka, India · On-site

Formally known as SYNOPSYS SIG

Information Security ConsultingInformation Security

Synopsys software integrity

Cyber Security Trainee

Feb 2024 – Oct 2024 · 8 mos · Bengaluru, Karnataka, India · On-site

Conducted in-depth application security assessments, identifying and prioritizing security risks, and provided actionable recommendations for effective risk mitigation.
Performed vulnerability assessments and penetration testing (VAPT) across diverse web applications, utilizing Burp Suite, OWASP guidelines, and different techniques to identify security gaps and enhance defensive strategies.
Engaged in application security assessments to ensure comprehensive coverage of potential vulnerabilities, enabling accurate and effective threat analysis.

Burp SuiteOWASP

Hackerone

Penetration Tester

Sep 2023 – Feb 2024 · 5 mos

Performed in-depth security testing on live applications through private and public HackerOne programs, uncovering and responsibly disclosing high-impact vulnerabilities.
Demonstrated expertise in identifying complex issues such as Insecure Direct Object References (IDOR), Cross-Site Scripting (XSS), Broken Access Controls, and Authentication flaws.
Collaborated with security teams and program owners to provide clear proof-of-concept reports, enabling efficient remediation and improving overall application security posture.

Information Security ConsultingNetwork SecurityInformation Security