Anjali

Security Analyst with experience in Web Application, API, and Network Penetration Testing, specializing in identifying and exploiting OWASP Top 10 and CVE vulnerabilities. Proven track record of performing security assessments for 80+ enterprise applications, leading penetration testing engagements, and delivering actionable remediation guidance. Experienced in using industry-standard tools including Burp Suite Pro, AppScan, Nessus, and Nmap, with strong expertise in vulnerability analysis, risk assessment, and secure development practices.

Cybersecurity Analyst - Northern Lights Technology Development - Chennai

(2023-01)

• Accomplished end-to-end penetration testing across 80+ enterprise applications, as measured by full security assessment coverage and compliance adherence, by executing Web, API, and Network VAPT using black-box and grey-box methodologies aligned with Secure SDLC (SSDLC) practices.
• Improved application security posture, as measured by reduction in critical and high-risk vulnerabilities, by performing DAST and SAST-informed assessments and identifying OWASP Top 10 and CVE Top 25 vulnerabilities including SQL Injection, XSS, CSRF, and authentication bypass.
• Strengthened internal network defenses, as measured by identified privilege escalation paths and segmentation gaps, by conducting network penetration testing and subnet segmentation assessments using tools like Nmap and Wireshark.
• Enhanced vulnerability management efficiency, as measured by faster remediation turnaround time, by conducting automated and manual scans, prioritizing findings using CVSS scoring, and integrating results into structured risk management frameworks (aligned with NIST concepts).
• Delivered actionable security insights to stakeholders, as measured by improved remediation rates, by preparing detailed reports with proof-of-concept exploits, business impact analysis, and presenting findings to developers and senior leadership.
• Led and mentored a team of 6 security analysts, as measured by improved report quality and delivery timelines, by overseeing testing activities, ensuring adherence to best practices, and fostering a red team mindset in offensive security assessments.
• Optimized penetration testing lifecycle management, as measured by streamlined engagement delivery, by managing test planning, execution, reporting, and tracking via internal systems and aligning with DevSecOps and CI/CD security integration workflows.
• Improved organizational security awareness, as measured by increased secure coding adoption, by conducting training sessions and promoting secure development practices aligned with Zero Trust security principles.
• Contributed to enterprise security governance, as measured by successful audit support and policy adoption, by assisting in development of security policies including Disaster Recovery and Asset Management, and supporting SIG Lite and ISO 27001-aligned compliance initiatives.
• Expanded security coverage to modern environments, as measured by broader infrastructure protection, by supporting assessments across traditional and cloud-based platforms (AWS/Azure exposure) and recommending security improvements.
• Strengthened monitoring and incident readiness, as measured by improved threat visibility, by collaborating with teams leveraging SIEM tools (e.g., Splunk concepts) and contributing to proactive detection strategies aligned with blue team operations

Master of Computer Application - Computer Application - SASTRA University (2019-01 - 2021-12) Thanjavur

Bachelor of Computer Science - Computer Science - Sri Sarada College for Women (2016-01 - 2019-12) Salem