Devaraj K

Cybersecurity professional with 2+ years of hands-on VAPT experience across Web, API, Mobile, and Network environments. Delivered security assessments for clients in banking, e-commerce, and enterprise sectors. Proficient in team leadership, assessment planning, identifying and validating critical vulnerabilities, developing PoCs, and translating technical findings into real-world business impact. Recognized in several Security Hall of Fame for responsible vulnerability disclosure.

CYBER SECURITY ANALYST I at Ozone Cyber Security (2024-08 – Present)

• Led 45+ end-to-end VAPT engagements using black-box, gray-box, and white-box testing methodologies across Web, API, Mobile, WebSocket and Network environments for banking, e-commerce, and enterprise clients including a 35-day multi-domain assessment incorporating risk assessment and threat modeling.
• Performed network security assessments including internal and external network penetration testing, firewall and configuration review, segmentation testing, wireless security assessment, and compliance testing.
• Conducted AI/LLM application security assessments covering prompt injection, jailbreak resistance, insecure output handling, and excessive agency.
• Leveraged AI-assisted techniques to support vulnerability analysis, attack-scenario development, and security research.
• Identified 150+ vulnerabilities through manual and automated testing, spanning authentication/authorization flaws, business logic issues, access control weaknesses, input validation gaps, and sensitive data exposure — mapped to OWASP Top 10 and other industry standards.
• Authored detailed security assessment reports with CVSS-rated findings and proof-of-concept evidence; communicated key risks, business impact, and remediation priorities through client engagements and executive presentations to both technical and executive stakeholders.
• Collaborated with development and architecture teams to validate findings, reproduce attack scenarios, and deliver actionable remediation guidance, and support remediation tracking through resolution.

JUNIOR CYBER SECURITY ANALYST - INTERN at Ozone Cyber Security (2024-02 – 2024-08)

• Supported Web Application and Network Security assessments under senior analyst supervision, assisting with vulnerability identification, validation, and evidence documentation.
• Performed hands-on security testing using Burp Suite, Nessus, and Postman across multiple client applications, identifying OWASP Top 10 based vulnerabilities.

Bachelor of Engineering in Cyber Security – Mahendra Engineering College (2020 – 2024)