About
Information Security Consultant with expertise in Application Security (SAST/DAST),Cloud Security and AI Security. Passionate about uncovering vulnerabilities, simplifying cybersecurity, and helping people stay one step ahead of cyber threats.
What I'm looking for
Open to remote cybersecurity opportunities in Application Security, Penetration Testing, and Security Consulting. Always looking for challenging environments, continuous learning, and meaningful security impact.
Experience
Senior Security Consultant
eSec Forte Technologies
Aug 2024 – Present
Lead end-to-end discovery projects for enterprise security
engagements — building high-level architecture designs and aligning
technology decisions to cyber risk reduction priorities across BFSI
clients.
• Manage cybersecurity technology lifecycle from conception to service
operation, ensuring alignment with security principles throughout
design, build, and support phases.
• Execute White, Grey, and Black Box penetration testing for web, API,
and mobile (Android) applications; validate findings from threat
detection tools and scanners to determine business-risk applicability
and remediation approach.
• Build and maintain technical documentation for cybersecurity
technology designs, operational runbooks, and security standards for
client engineering and DevOps teams.
Security ArchitectureSecure NetworkTeam LeadingCloud SecRed Teaming
Security Engineer
LogiNext Solutions
May 2023 – Jun 2024
Designed and enforced endpoint privilege management controls,
applying least-privilege models across cloud-managed and on-prem
endpoints to reduce attack surface.
• Led proactive threat modelling during architectural design phases to
anticipate and mitigate vulnerabilities pre-deployment.
• Deployed and tuned advanced SIEM/XDR solutions, significantly
enhancing real-time threat detection; authored technical documentation
and operational procedures.
IAMCloud SecurityAppSecSIEM/XDRCI/CD
Penetration Tester
Essential Infosec Pvt Ltd
Jan 2022 – Apr 2023
Jan 2022 – Apr 2023
• Strengthened cloud-native security controls with a focus on IAM, secure
networking, privileged identity governance, and continuous vulnerability
management.
• Contributed to security architecture documentation and design
baselines aligned to NIST and OWASP frameworks.
• Developed custom Python and Go automation scripts, accelerating
vulnerability discovery and improving operational efficiency.
VAPTAppSecNetwork SecuritySASTDast
Education
Chandigarh University, Punjab
Bachelor of Engineering · Computer Science
2018 – 2022
Certifications
Certified Ethical Hacker
EC Council
Apr 2023 – Jun 2025
Skills
Red TeamingCheckMarXFortifyOWASP Top 10LLM/AI SecurityApplication SecurityBurp SuiteCloud SecuritySAST/DASTMobile VAPTWeb Application SecuritySecure SDLCPenetration Testing
Languages
English (Full professional proficiency)Bengali (Professional working proficiency)Hindi (Full professional proficiency)