Veeradimmu Madesh

Security Analyst and Penetration tester specializing in web, mobile, and API security. 100+ VAPT engagements across enterprise, e-commerce, and government/banking sectors with 60+ critical/high-severity findings delivered and 100% verified closure through post-remediation re-testing. Actively building expertise in AI/LLM security – prompt injection and exploitation of LLM-integrated APIs (PortSwigger Web Security Academy labs). Strong in OWASP Top 10 exploitation, CVSS 3.1-based reporting, and evidence-driven remediation walkthroughs.

Security Analyst — Penetration Tester - Born Hackers Cybersecurity Solutions

(2025-08)

• Black-box, grey-box, and white-box security assessments of 70+ web, mobile (iOS/Android), and API applications for enterprise, e-commerce, and government/banking clients.
• Discovered and reported 60+ critical/high-severity vulnerabilities (SQLi, XSS, CSRF, IDOR, auth bypass, privilege escalation, logic flaws) with CVSS v3.1 ratings and step-by-step proof-of-concept documentation.
• Achieved 100% post-remediation re-testing coverage – verified every fix and confirmed closure in collaboration with client development and DevOps teams, with findings closed within agreed SLAs.
• Performed network infrastructure assessments (internal/external): port scanning, service enumeration, firewall rule analysis, and misconfiguration review using Nmap, Metasploit, and manual techniques.
• Tested REST/SOAP APIs with Postman and curl, uncovering broken object-level authorization, excessive data exposure, and injection flaws missed by automated scanners.
• Wrote custom Python/Bash scripts and Burp Suite macros to automate token-based auth-bypass testing and accelerate triage of repetitive findings.

Cybersecurity Intern - Cisco Networking Academy – NASSCOM Future Skills

(2024-01 - 2024-03)

• Completed Cybersecurity Essentials, covering attack TTPs, CIA triad principles, and defense countermeasures.
• Applied TCP/IP, DNS, and HTTP/HTTPS knowledge to identify network weaknesses in lab environments.

Cybersecurity Intern - YHills

(2022-10 - 2023-01)

• Practiced ethical-hacking methodology and OWASP Top 10 exploitation in controlled test environments.

Master of Computer Applications - MCA - Presidency University, Bengaluru (2023-09 - 2025-05)

Bachelor of Computer Applications - BCA - SDHR Degree College (Sri Venkateswara University), Tirupati (2020-09 - 2023-07)