Divya Shree Balakrishnan

Certified Ethical Hacker (CEH v12) with 4+ years of experience in Application Security, specializing in Dynamic Application Security Testing (DAST), Vulnerability Assessment and Penetration Testing (VAPT), and Agentic AI Security across enterprise-grade web applications. Proficient in Burp Suite, OWASP ZAP, Fortify, SonarQube, Nessus, and Nmap. Strong expertise in OWASP Top 10, SANS Top 25, manual exploitation techniques, and secure SDLC integration.

Experienced in identifying complex vulnerabilities including privilege escalation, race conditions, business logic flaws, and AI agent security issues. Proven track record of collaborating with development teams to drive measurable remediation outcomes.

Senior System Engineer – Application Security - Infosys Ltd. - Coimbatore

(2025-04)

Lead application security efforts across 5+ internal and client-facing enterprise platforms, driving end-to-end VAPT and DAST assessments.

• Perform in-depth manual and automated security testing using Burp Suite Pro, OWASP ZAP, SonarQube, 42Crunch, and Postman, identifying 80+ vulnerabilities across engagements.
• Specialize in Agentic AI Security Testing — identified critical security issues in AI agent chat systems including prompt injection, insecure data handling, and unauthorized action execution.
• Discovered and reported high-severity vulnerabilities including Privilege Escalation, Access Control flaws, Race Conditions, Rate Limiting Bypass, and sensitive data exposure in application logs.
• Achieved 60%+ vulnerability reduction in Agentic AI applications and 40%+ in standard web applications through actionable, developer-friendly remediation reports.
• Created detailed security checklists, test cases, and risk-rated reports with PoC aligned to OWASP Top 10 and NIST standards.
• Developed Python scripts to automate security testing workflows, reducing manual effort and improving testing efficiency across multiple engagements.
• Mentor junior engineers and conduct knowledge transfer sessions on secure coding practices and OWASP Top 10 exploitation techniques.

System Engineer – Application Security - Infosys Ltd. - Coimbatore

(2023-01 - 2025-04)

Initiated and expanded security testing practices across multiple web application projects, contributing to bug identification and vulnerability reporting.

• Conducted vulnerability assessments and participated in DAST testing using Burp Suite and OWASP ZAP across enterprise applications.
• Collaborated with development teams to triage findings, validate fixes, and document remediation evidence.
• Contributed to security compliance activities aligned with OWASP Top 10 and SANS Top 25 vulnerability frameworks.

System Engineer Trainee - Infosys Ltd. - Mysore

(2022-07 - 2023-01)

Completed intensive training in Java, Python, HTML, CSS, JavaScript, PHP, and Linux fundamentals.

• Built a secure full-stack capstone project incorporating secure coding practices and input validation controls.

Bachelor of Engineering - Electronics and Communication - KLN College of Engineering (2018 - 2022)