Uday Shelke

Application Security Engineer with 3 years of experience in Web, API, Mobile (Android/iOS), and Thick Client assessments. Delivered security assessments for 40+ applications, validating 350+ security findings across all severity levels through testing, reverse engineering, and runtime analysis, while partnering with engineering teams to improve application security.

Application Security Engineer - Aress Software - Pune, Maharashtra

(2024-08)

• Performed manual security assessments across Web, REST APIs, Android, iOS, and Thick Client applications, uncovering IDOR/BOLA, SSRF, SQL Injection, and admin panel authentication bypasses that enabled full database access.
• Identified business-logic flaws leading to account takeover, and assessed Android/IoS/Windows thick-client apps via reverse engineering, uncovering SSL pinning weaknesses, DLL hijacking, and insecure deserialization.
• Partnered with development teams to validate remediation, retest fixes, and guide secure implementation prior to production releases.

Information Security Analyst - Etha's Cyber Security - Sambhajinagar, Maharashtra

(2023-06 - 2024-07)

• Conducted Web and API penetration tests for client engagements, bypassing authentication and authorization through session and role manipulation to expose privilege escalation paths; delivered PoCs and CVSS-based remediation guidance.

Application Security Tester (Internship) - Virtually Testing Foundation - Remote

(2021-10 - 2021-12)

• Performed reconnaissance and manual vulnerability validation across Web and API assessments, documenting findings and verifying fixes alongside senior testers.

Cyber Security Summer Internship - Gurugram Police - Remote

(2021-06 - 2021-07)

• Gained exposure to cybercrime investigations, digital forensics, and incident response.

Bachelor of Engineering - Computer Science - Indira Gandhi Engineering College (2023)