Ashutosh Sarap

Security Analyst with 2.5 years of experience in Web and API Security Testing, specializing in Vulnerability Assessment and Penetration Testing (VAPT). Proficient in manual and automated security testing, identifying and mitigating security risks in web applications, APIs. Skilled in security tools such as Burp Suite, Nessus and OWASP ZAP.

Strong understanding of OWASP Top 10, API Security and Web Application Security. Passionate about securing applications and continuously learning advanced attack techniques.

Security Analyst at Script Build Software PVT LTD (2024-03 – Present)

Responsible for Web and API Security Testing, Vulnerability Assessments and Penetration Testing (VAPT) to identify and mitigate critical security risks across 30+ web applications and 25+ APIs, improving overall security posture.

• Conducted security testing on multiple web applications and APIs, uncovering 30+ vulnerabilities (SQLi, XSS, IDOR, SSRF, BOLA) based on OWASP Top 10.
• Reduced vulnerability remediation time by 30% (from 12 to 8 days) by working closely with developers and providing structured remediation guidance.
• Performed manual and automated security tests using Burp Suite Pro, OWASPZAP and Postman, strengthening application defenses.
• Developed detailed security reports, documenting critical risks, impact analysis and remediation steps, improving vulnerability tracking.

MCA – Dr. D. Y. Patil School of MCA, Pune

BCA – Tilak Maharashtra Vidyapeeth, Pune