Periyannan S

Cybersecurity Assurance professional with 3+ years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT) across web applications, APIs, mobile applications, thick-client applications, and IT infrastructure. Skilled in manual penetration testing, vulnerability assessment, risk analysis, and remediation validation using Burp Suite Professional, MobSF, Frida, and JADX. Experienced in preparing comprehensive VAPT reports and supporting CERT-In empanelment assessment activities.

Completed the CPENT V2 course, with knowledge of OWASP, NIST, and OSSTMM frameworks.

Yoganandh & Ram LLP - Chennai, India

(2023-02)

• Conducted Vulnerability Assessment and Penetration Testing (VAPT) across web applications, REST/GraphQL/SOAP APIs, Android and iOS applications, desktop and thick-client applications, IT infrastructure, and networks using manual testing techniques and industry-standard security tools.
• Executed black-box and grey-box penetration tests to identify and validate vulnerabilities, including SQL Injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), Broken Object Level Authorization (BOLA), broken authentication, access-control weaknesses, privilege escalation, and business logic flaws.
• Assessed Android and iOS applications using MobSF, Frida, and JADX, and tested desktop and thick-client applications using Wireshark, Fiddler, and Echo Mirage.
• Evaluated API security against applicable OWASP guidelines, focusing on authentication and authorization weaknesses, mass assignment, excessive data exposure, and access-control vulnerabilities.
• Assessed network and IT infrastructure security to identify exposed services, outdated software, security misconfigurations, and potential attack paths.
• Prepared comprehensive VAPT reports documenting vulnerability details, CVSS severity ratings, proof-of-concept (PoC) evidence, affected assets, business impact, and prioritized remediation recommendations.
• Conducted vulnerability retesting to verify remediation effectiveness, update finding statuses, and track unresolved vulnerabilities through closure.
• Collaborated with clients, developers, and infrastructure teams to communicate security findings, recommend corrective actions, and monitor remediation progress.
• Applied relevant security standards and guidelines, including the OWASP Top 10, OWASP API Security Top 10, OWASP MASVS, NIST SP 800-115, and OSSTMM, as applicable to assessment scope.
• Supported organizational CERT-In empanelment assessment activities by contributing to information security auditing and VAPT-related tasks.

M.Sc. - Cyber Forensics and Information Security - University of Madras (2025-07)

B.Sc. - Computer Science - Government Arts & Science College (2019-07 - 2022-06)