Raj Sharma

AI Researcher

Mumbai, Maharashtra, India4 yrs 10 mos experience

Key Highlights

4 years of hands-on experience in Cybersecurity.
Expert in Vulnerability Assessment and Penetration Testing.
Proficient with industry-standard tools like Burp Suite and Kali Linux.

Stackforce AI infers this person is a Cybersecurity professional specializing in Vulnerability Assessment and Penetration Testing.

Contact

Skills

Core Skills

Vulnerability Assessment And Penetration Testing (vapt)CybersecurityPenetration TestingVulnerability AssessmentApplication Security

Other Skills

Active DirectoryAppSpiderBurp SuiteCode ReviewCommunicationConfiguration AuditDASTDynamic Application Security TestingInformation SecurityJiraKali LinuxMicrosoft ExcelMicrosoft OutlookMicrosoft PowerPointMicrosoft SQL Server

About

hello there, I am a Cyber Security enthusiast with a hands on experience of 4 years in Vulnerability Assessment and Penetration testing of web application, mobile application and API with industry recognised tools like Burpsuite and Kali Linux. I have also completed my CRTP which gave me a nice experience with Active directory enumeration and exploitation.

Experience

4 yrs 10 mos

Total Experience

11 mos

Average Tenure

1 yr 3 mos

Current Experience

Microsoft

Security Researcher 2

Mar 2025 – Present · 1 yr 3 mos · Bengaluru, Karnataka, India · On-site

I'm in the Vulnerability & Mitigation division of MSRC, my responsibilities include:
traiging & analysis of vulnerabilities
validation of issues reported by finders
determining the severity and suggesting relevant fixes for the issues
perform Variant hunting for the bugs across multiple applications

Vulnerability AssessmentMitigationVulnerability AnalysisSeverity DeterminationVariant HuntingVulnerability Assessment and Penetration Testing (VAPT)+1

Payatu

Security Consultant

Jul 2024 – Feb 2025 · 7 mos · Pune, Maharashtra, India · On-site

Working in the mobile tower doing research and pentest on mobile apps to find new threat vectors for both static and dynamic analysis of Apps

Burp SuiteActive DirectoryApplication SecurityCode ReviewCybersecurityDAST+4

Pioneer infotech (p) ltd

Information Security Consultant

Mar 2024 – Jul 2024 · 4 mos · Mumbai, Maharashtra, India

worked on BNP Paribas as a client
Performed Weekly and monthly Authenticated testing & scans on P3, P2 and P1 (Intranet) applications with
AppSpider Standalone and Enterprise.
Co-ordinated with the team in triaging the open points based on the severity in a DevSecOps process using
JIRA.
Performed Software Composition Analysis to ensure proper Licensing, prioritizing bug fixes and Complying
with the regulatory requirements
Conducted Static and Dynamic application security testing on P4 (Internet facing) application using Qualys
and Fortify.
Identified vulnerabilities doing API testing using Postman and BurpSuite

QualysAppSpiderJiraStatic Application Security TestingDynamic Application Security TestingSoftware Composition Analysis+2

Ey

2 roles

Associate Consultant

Sep 2023 – Mar 2024 · 6 mos

Code ReviewNetwork SecurityCommunicationConfiguration AuditSocial EngineeringPhishing+7

Senior Analyst

Jul 2022 – Sep 2023 · 1 yr 2 mos

i perform vulnerability assessment, configuration audit and penetration testing on client web application, API and network using tools like HCL appscan, Burp Suite, Nessus and Postman. Followed by documentation of the findings and preparing a report

Code ReviewCommunicationSocial EngineeringBurp SuiteSocial MediaTenable Nessus+4

Deloitte

Senior Analyst

Jun 2021 – Jun 2022 · 1 yr · Mumbai, Maharashtra, India

I perform SSAE18 SOC audit reviews (SOC 1 & SOC 2), control walkthroughs, population
validation, sampling and testing. Worked on team with IT professionals testing Design and
Implementation & Operating Effectiveness for IT and Facilities controls. Completed
extensive documentation and testing for products & process audits during fieldwork.

CommunicationSocial EngineeringRemediation

Cybernx technologies private limited

Security Analyst

Apr 2021 – Jun 2021 · 2 mos · Mumbai, Maharashtra, India

worked in the domain of Cyber Security and my job was to do Vulnerability Assessment
and Penetration Testing on web applications, finding vulnerabilities, doing client walkthroughs and extensive documentation

Code ReviewCommunicationSocial EngineeringRemediation

Career technology cuber security india

Security Analyst

Aug 2019 – Jan 2020 · 5 mos · Mumbai, Maharashtra, India

worked in the domain of Cyber Security and my job was to do Vulnerability Assessment
and Penetration Testing on web applications, finding vulnerabilities like XSS, SSRF, IDOR,
Broken Authentication and report them to the website owners

Code ReviewCommunicationSocial EngineeringRemediation