Security Analyst at Flynaut Infotech Pvt Ltd. (2025-05 – 2026-02)
- Conducted Vulnerability Assessment & Penetration Testing (VAPT) on 10+ web and internal applications, identifying vulnerabilities aligned with OWASP Top 10 such as XSS, IDOR, and SQL Injection.
- Performed reconnaissance and enumeration using tools like Nmap, ffuf, and Nuclei to identify potential attack surfaces.
- Executed web and API security testing using Burp Suite, including manual exploitation and validation of vulnerabilities.
- Supported SOC operations by analyzing phishing emails, monitoring suspicious activities, and escalating potential security incidents.
- Assisted in red team activities including privilege escalation, lateral movement, and exploitation validation in controlled environments.
- Documented vulnerabilities with risk ratings, proof-of-concept, and remediation recommendations for developers.
- Collaborated with development teams to ensure timely remediation and secure application deployment.
Quality Analyst Intern at Flynaut Infotech Pvt Ltd. (2024-11 – 2025-04)
- Performed end-to-end manual testing for web and mobile application, identifying functional, UI/UX, and security-related defects.
- Created and maintained detailed test cases, execution reports, and defect logs using Jira and Xray.
- Worked closely with developers to track and resolve bugs, improving application quality and stability.
Cybersecurity Intern at Kirabiz Technologies (2023-07 – 2023-09)
- Conducted web application security assessments using tools like ffuf and Dirb for directory and endpoint discovery.
- Identified and documented vulnerabilities based on OWASP Top 10, including misconfigurations and input validation issues.
- Assisted in basic reconnaissance and vulnerability analysis tasks.