Srivatsan Diwakar

Offensive Security-focused Cybersecurity Analyst with 2+ years of hands-on experience in Web Application Vulnerability Assessment and Penetration Testing, API Penetration Testing, Cloud Security Posture Management, and emerging security domains such as LLM and Chatbot Security. Skilled in leveraging the OWASP WSTG Framework and OWASP Top 10 methodologies to identify, assess, and report critical vulnerabilities across 50+ web applications for diverse client environments. Experienced in managing multi-client engagements, performing comprehensive security assessments, and developing automation-driven approaches to enhance testing efficiency and coverage.

Strong understanding of offensive security practices, vulnerability validation, and risk-based remediation guidance. Currently pursuing the Certified Penetration Testing Professional (CPENT) certification from EC-Council to further strengthen advanced penetration testing and red teaming capabilities.

Cybersecurity Analyst at Pragya Cyber (2024-04 – Present)

• Conducted Web Application VAPT on 50+ web applications using the OWASP Web Security Testing Guide (WSTG) framework and OWASP Top 10, identifying critical vulnerabilities including SQL Injection, UI Injection, Privilege Escalation, Windows EternalBlue, and KeyCloak misconfigurations.
• Performed in-depth API Penetration Testing, assessing REST APIs for authentication flaws, broken object-level authorization (BOLA), injection vulnerabilities, and improper input validation.
• Executed Cloud Security Posture Management (CSPM) assessments across AWS, Azure, GCP, and DigitalOcean using Prowler and ScoutSuite, identifying misconfigurations and compliance gaps.
• Contributed to the development of an automated CSPM Scanner by integrating open-source CSPM tools leveraging AI-assisted development methodologies, significantly streamlining cloud security audit workflows.
• Performed Thick Client Penetration Testing, analyzing desktop application binaries for insecure data storage, weak authentication, and traffic interception vulnerabilities.
• Conducted LLM/ChatBot Penetration Testing using Promptfoo, assessing AI systems for prompt injection, jailbreaking, and data leakage risks.
• Investigated and helped remediate a Chinese SEO WordPress Spam Hack, performing root cause analysis and hardening recommendations.
• Performed Network Vulnerability Assessments using Nessus and OpenVAS, delivering prioritized remediation reports with CVSS-scored findings.
• Managed concurrent security engagements across multiple clients, coordinating assessment timelines, delivering detailed reports, and presenting findings to stakeholders.

B.Tech in Computer Science (Specialization: Information Security) – Vellore Institute of Technology (VIT) (2019-07 – 2023-07)