Sagar Nandikol

VAPT Engineer | Web Application Security | Penetration Testing

Talent

BengaluruMember since August 25, 2026

PythonIDORReconnaissanceExploitationBurp SuiteNmapMetasploitWiresharkPython AutomationREST APIsJSONJWT

Hire this person

Send a job offer directly to this candidate

PythonIDORReconnaissanceExploitationBurp Suite

About

Results-driven Security Professional and Penetration Tester with 2+ years of experience conducting end-to-end security assessments across web applications, REST APIs, cloud environments, and mobile applications. Skilled in the full penetration testing lifecycle, from scoping and reconnaissance to controlled exploitation and comprehensive executive reporting. Adept at utilizing manual and automated testing methodologies to identify, analyze, and mitigate complex logical and architectural vulnerabilities.

Experience

Penetration Tester - LG Soft - Bengaluru, India (Remote)

(2024-05 - 2026-07)

Security Assessments: Performed end-to-end security assessments and penetration testing of web applications, RESTful APIs, and internal networks, identifying security vulnerabilities and providing actionable remediation guidance to development teams.
Web & API Security Testing: Conducted in-depth security testing using Burp Suite and Postman, identifying vulnerabilities including Broken Access Control, IDOR, injection flaws, JWT misconfigurations, CSRF, and business logic vulnerabilities.
Mobile Application Security: Performed security testing of Android and iOS applications, identifying issues including insecure client-side data storage, improper certificate validation, and root/jailbreak detection weaknesses.
Network Security Testing: Conducted authorized internal network security assessments using Nmap and Metasploit, identifying exposed services, vulnerabilities, misconfigurations, and potential security weaknesses.
Security Automation & Monitoring: Developed Python automation scripts for security testing, including race-condition and credential-testing use cases; implemented Wazuh-based security monitoring for web servers to support threat detection and log analysis.
Remediation & Collaboration: Collaborated with development teams to debug Python applications, validate security fixes, perform root-cause analysis, and support vulnerability remediation.