VAPT, AppSec, Penetration, CI/CD, SAST/DAST, ASM, Python
1. Could you introduce yourself and tell us about you? Your current / recent jobs and employers? Previous companies and jobs? He has 3+ years in security consulting and engineering. He began as a VAPT analyst at a service-based company, XXXX, where he ran 100+ VAPT assessments across web, Android, network and API targets. At XXXX (since 2024) he handled attack surface management for multiple clients: finding security loopholes and mapping their digital assets. He also built automation scripts and AI workflows for the company’s SaaS product, and worked on a dark web monitoring platform. Since June 2026, XXXX has deployed him at XXXX, working remotely with their team over Slack. There he manages the digital assets of XXXX and its subsidiaries and acquisitions, and finds security issues. He also does threat modelling, source code and design reviews, manages CI/CD pipelines and handles incident response, investigating root causes and taking mitigation action. 2. What skill(s) / experience would you self-describe as strongest or specialist in? His strengths are VAPT and attack surface management, plus application security engineering. He also contributes to open source: he built JS Radar, a JavaScript security analysis platform that crawls websites and finds vulnerabilities, and a cyber threat intelligence collection of hacking forums published on GitHub. He is building an autonomous AI pen-testing harness: given a website URL and any credentials, it runs a comprehensive security assessment using the AI model of choice. He is also keen on dark web research and investigation. The CV adds tools (Burp Suite, Nuclei, SAST and DAST tools), Python and Bash automation, and recognition from NCIIPC and several hall-of-fame listings.
VAPT, AppSec, Penetration, CI/CD, SAST/DAST, ASM, Python Read More »
