Dhanish S

Cybersecurity professional with experience in penetration testing and vulnerability assessment across web applications, mobile applications, networks. Experienced in conducting security assessments, identifying, validating, and exploiting vulnerabilities, developing Proofs of Concept (PoCs), analyzing security and business impact, and providing remediation recommendations. Practical experience in internal and external penetration testing engagements, Android application security testing, binary analysis, static and dynamic analysis, and reverse engineering of mobile applications.

Exposure to Active Directory security assessments and attack techniques, including domain and AD takeover scenarios. Strong analytical and problem-solving skills with a practical approach to identifying, understanding, and assessing real-world security risks.

Security Engineer at Defsecone (2026-01 – Present)

• Performed Vulnerability Assessment and Penetration Testing (VAPT) on web applications, Android and iOS mobile applications, systems, and internal/external environments for clients across multiple domains, including the banking sector.
• Participated in Red Team engagements involving security assessments, vulnerability validation, exploitation, and reporting across web, mobile, system, and network environments.
• Identified, validated, and documented security vulnerabilities, assigning severity levels (Critical, High, Medium, and Low) based on CVSS scores, risk, and business impact.
• Prepared detailed VAPT reports including Proof of Concept (PoC), impact analysis, and remediation recommendations for clients.
• Collaborated with project teams to validate findings, explain security risks, and perform retesting after remediation to verify that identified vulnerabilities were successfully resolved.
• Conducted Android and iOS mobile application security assessments using industry-standard methodologies, identifying security issues related to authentication, authorization, insecure data storage, API security, and application misconfigurations.
• Performed practical static and dynamic analysis of mobile application binaries, including reverse engineering of Android applications to analyze application logic, identify security-sensitive functionality, and assess potential vulnerabilities.

Security Solutions Intern at DefSecOne (2025-04 – 2025-10)

• Contributed to the development of a web application designed for automatic configuration auditing, significantly reducing manual security assessment efforts.
• Developed backend components using Django and integrated them with a PostgreSQL database, while assisting in building responsive frontend features using React.
• Conducted vulnerability assessments across multiple projects using Nessus, analyzed and prioritized vulnerabilities based on CVSS scoring, and prepared detailed vulnerability assessment reports with actionable remediation recommendations.
• Supported vulnerability validation and re-testing to ensure effective vulnerability closure, while collaborating within a cybersecurity-focused team and gaining hands-on exposure to secure development practices and real-world auditing workflows.

B.E in Computer Science and Engineering – SA Engineering College, Chennai (2022 – 2026)