Janmitha Rathnakumar

M.Sc. (IT Security Management) qualified professional with hands-on experience in cybersecurity, web application security, penetration testing and secure software development, including product, IoT, and firmware security assessments. Currently driving web and product security initiatives at Festo, Bangalore, performing penetration testing, vulnerability assessments, SBOM analysis, and preparing structured reports with actionable remediation recommendations. Skilled in identifying and mitigating security vulnerabilities by leveraging OWASP WSTG and Top 10 standards, using tools such as Burp Suite and sqlmap to enhance application and product security.

Proven ability to identify and document 20+ security vulnerabilities using industry-standard penetration testing tools and methodologies. Displayed advanced capability in enterprise security workflows, intrusion detection, IAM principles, secure SDLC, risk assessment, and supply chain security, integrating technical solutions to align with business objectives. Contributed to automation of metadata enrichment in SBOM frameworks, reducing manual effort and improving efficiency in dependency and license compliance verification.

Recognized as Intern of the Month at LÆMON for outstanding contributions to product testing, secure software development, and automation initiatives. Showcased strong problem-solving, analytical thinking, multitasking, and communication skills, enabling efficient collaboration with cross-functional teams and delivery of high-quality security solutions. Currently pursuing eJPT (eLearnSecurity Junior Penetration Tester) certification via INE Security, strengthening hands-on penetration testing expertise.

Penetration Tester - Festo - Bengaluru

(2025-04 - 2026-02)

• Conducting end-to-end web application penetration testing, ensuring thorough vulnerability coverage.
• Executing manual security assessments using Burp Suite, including request interception, parameter manipulation, session analysis, and validation of vulnerabilities.
• Utilizing advanced security testing tools, including ZAP and sqlmap, to identify, verify, and remediate critical application and product vulnerabilities in controlled environments.
• Generating and analyzing Software Bill of Materials (SBOMs) to track dependencies, detect outdated packages, known CVEs, and license compliance gaps, firming supply chain security.
• Supporting product and IoT security assessments for enterprise applications with Angular front-end and Java back-end, ensuring robust end-to-end protection.
• Performing firmware and file analysis using Binwalk to detect embedded components and assess potential security risks.
• Operating within Kali Linux environments to execute security testing labs, leverage advanced tools, and simulate real-world attack scenarios.
• Preparing structured security reports encompassing risk impact analysis, step-by-step reproduction, severity assessment, and actionable remediation guidance.
• Driving enterprise security workflows, conducting internal security reviews, and implementing secure development practices to strengthen organizational risk mitigation.
• Identified and documented 20+ security issues and providing actionable remediation recommendations for enterprise applications.

Junior Software Developer - LÆMON - Berlin, Germany

(2022-08 - 2023-02)

• Designed and upheld cross-platform mobile applications for iOS and Android via React Native, embedding security-first development practices throughout software lifecycle.
• Executed comprehensive software testing and generated detailed quality assurance reports, ensuring robust performance, reliability, and secure application delivery.
• Partnered with cross-functional teams to preprocess and manage sensitive text data securely, safeguarding data integrity and confidentiality.
• Enforced secure coding standards and led code reviews to proactively detect and mitigate potential security vulnerabilities.

M.Sc. - IT Security Management - Arden University (2025)

Advanced Program - Full Stack Software Engineering - NIIT (2022)

B.Sc. - Computer Science - Anna Adarsh College for Women (2021)

Advanced Programming Professional - IIT-M

Master - Data Science - GUVI