Vidhan Thakur

Security Engineer with 1.5+ years of experience in web, API, mobile, and network penetration testing, secure code review, and Secure SDLC / Shift-Left implementation. Skilled in identifying and validating real-world vulnerabilities, with public disclosures including an OTP bypass and prompt injection issues in AI-integrated applications. Currently building toward Product Security Engineering, with growing focus on threat modeling and DevSecOps practices.

Junior Security Engineer - Intelliroot Technologies (OPC) Pvt. Ltd. - Bangalore, India

(2025-02)

• Executed end-to-end security assessments (Web, API, Mobile, Network) for 70+ client products, uncovering critical business logic flaws and reducing deployment risk.
• Conducted source code reviews, Static Application Security Testing (SAST), and Software Composition Analysis (SCA) to identify insecure coding practices and vulnerable third-party dependencies.
• Collaborated with development teams on Secure SDLC and Shift-Left Security activities, identifying and remediating security issues during early stages of the development lifecycle.
• Tested authentication, authorization, and session management controls against OWASP Top 10 criteria; developed Proof-of-Concept (PoC) exploits to demonstrate real-world business impact.
• Used Burp Suite, Nmap, Nessus, Metasploit, MobSF, Frida, and Wireshark to execute assessments and validate findings.
• Prepared detailed VAPT and CERT-In compliant reports covering risk assessment, business impact analysis, and remediation guidance for stakeholder communication.

Cybersecurity Intern - SenseLearner Technologies Pvt. Ltd. - India

(2023-09 - 2023-10)

• Applied penetration testing and incident response fundamentals to practical cybersecurity assessments.
• Conducted vulnerability assessments using Nmap and Burp Suite.

Bachelor of Engineering - Computer Science Engineering - Prof. Ram Meghe Institute of Technology & Research, Badnera (2020 - 2024)