Veena Pothunuru

Application Security and Vulnerability Assessment professional with 2+ years of Software Development experience, combining secure coding practices with hands-on expertise in web application penetration testing and vulnerability validation. Hands-on exposure to reconnaissance, enumeration, vulnerability assessment, penetration testing methodologies, exploitation techniques, remediation validation, and security reporting across web application environments. Strong understanding of OWASP Top 10, secure SDLC, authentication mechanisms, API security, Linux environments, networking fundamentals, and attacker methodologies for securing enterprise applications.

Practical experience using industry-standard security tools including Burp Suite, Nmap, OWASP ZAP, Gobuster, FFUF, Metasploit, Wireshark, and Wazuh SIEM for application security assessments and security monitoring. Software development background with experience in Java, Spring Boot, REST APIs, Microservices Architecture, AWS Secrets Manager, vulnerability remediation, authentication hardening, and production issue resolution.

Software Developer - Digit Insurance - Hyderabad

(2023-06 - 2025-12)

• Engineered and enhanced enterprise Java-based applications built on Spring Boot, REST APIs, and Microservices Architecture, while integrating secure coding practices by eliminating hardcoded credentials through AWS Secrets Manager, strengthening credential protection and application security.
• Collaborated with cross-functional development and security teams to implement application security improvements by remediating SQL Injection, input validation weaknesses, SAST findings, and authentication vulnerabilities, while replacing Basic Authentication with token-based authentication to reinforce secure access control mechanisms.
• Strengthened application resilience by hardening server & application configurations to minimize information disclosure risks, supporting platform upgrade initiatives, and ensuring service compatibility, reliability, & stable deployments across enterprise environments.
• Investigated, debugged, and resolved production defects, including NullPointerExceptions and application issues, while gaining practical exposure to secure software development principles, vulnerability remediation, and security-first engineering practices that support a transition into Application Security (AppSec) and Vulnerability Assessment & Penetration Testing (VAPT) roles.

B.Tech. - Computer Science Engineering - Andhra University College of Engineering (2023) Visakhapatnam